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(§) DItposltif «)ectronk|u» d* jw da haurd 

@ Un boWer portaWe (1 1) comprond tivt moyonji d9 mA- 
rtOire aples d stoeiar au molna uno donnOo do r6f«r©nc<», 
* oomparaboo optw d oofnpww todia 
donnte da rtferencas avec une donn*« da low IrtjoduHo par 
10 />uew par uno inteffeca da convnunfcaUon. Tur* do cos 

rS!^-5£!!![!!?S^ "™ pSnSf** d» fapoii alfelo^B. 
una infemiBtrm da gain d6pendient au mcina du rteulttf de 
Jadrta comparaSsoo, &t stodtAs dam lu moyDna d» <n6- 
rnoiro, et des moyens de oyptaoo-teniw eom oplos, on rft- 
ponso a uno jnfomiahon ptWStermlnfei do dimDndo da 
paernent (IDP) repia, 4 iteWIr urte prerr.tro yUeur da ou'n 
oypifia 4 partr da ladile IntormatJon da gain, Uno tt&iion 

systftme denWe/sortia (17) apta ft c«<p6tef woe Hnter- 
ia<»du bonier, et des moyens do traHbrrptnl-flytl&ino (18) 
" domandB ds polcmcni 6monani 

au joueur. A lire ladits infofTnatioo da gain conlenuo dans 
^moyens da nfmofie du boiiier. Dea tnoyons do 
oyptege-systtme (19), homoloouM disa moyons dn 
awtegt-boilier. SlaWissenI una dew»«»»v) vntcwr do gain 
^^t} informatrtm de gain U paio- 

nwwjrffetirf du gam au joutw est wfidit^onnd pm lu 
concDidanca des deux v^eurs de gain trymnr. 
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L'mvention conceiiie un dispositif flectronique ds Jeu de hasard. 

On connait actuetlemenE differents jeux de hasard psrtnettam & un 
joueur de gagncr des sonmies d'argent moyemiant le paiemcnt d'une 
mise de depart. Ainsi. par excmple dans le jcu appeLS "loto" (marque 
d^posfie) le joueur coche une serie de chiffres sur un dcJcet qu'i] fait 
vah'der Euprebi d^un organismc spe*cialise en' en acquittant un prix 
correspondant a 3;: mise de depart. Un drage au sort ult^rieur est 
erfectu5 sous coatrole dans un endroic choisi et. les joueurs en 
possession d'un ticket gagnant peuvent retirer leur gain aupi^s d'un 
ovganisme payeur. 

Par rapport h. ces jeux classiques, n&essitant un support panier et 
des tirages au son a des dau-.s pr^detennin^es et valableVpour tous Ics 
jcueui^, I'invention propose un concept radicalement different de 
dispositif de jeu de hasard. 

Un but de Uiavention est de proposer un bottier autonomc et 
portable destinsS 3 pennctlre h un joueur deffectuer une ou plusi^uis 
e'prcuves de jeu de hasard, la rtfussitc ou I'^chec auxdites 6orcuves 
condirionnant un score ou un. niveau de gain suivant des riglcs de jeu 
pr^d^temunees. Ce bolder constitue alors dgalement I'elfTncnt de 
transaction pour le paiemcnt du gain et comporte tous les flcments 
ne'cessaires a la ve'rificatibn de ce gain. Outre ce boitier ponable et 
autonome, ii cit y.i.a un systfemc de concrole. exteme au boider, 
pemettant k Torganisnie payeur d'effecti-er les vc'riiicatdons 
ntfcessaires avant le paiemcnt du gain. 

-L'invention a encore pour but de pcnnettre d'cffcccuer au scin 
raeme du boitier £Iectromque. le tirage au son ,dcs dcnndes ds 
rffdrence par rapport auxquelles seront compar<«es ies donn&s de jeu 
choisies par.le joueur, L'invenrion vise egalement ^ permetcrc !a 
simulation d'un ou de plusieurs lances de d^s. cn eiTecmant au sein du 
boiuer mcme, tirage au sort des donndes de jeu qui seront 
. comparecs S des donnees de reference pred-Jterminees. 

Un probJcnie trts impon=nt, inhe'rent a un tel disposirif de jeu. 
consiste a lutter centre la fraude. UinveuLioti a a cet effet e'salement 
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pour but, de prfvoir plusicurs nivcaux de sfcuritd ct dc verification 
ayant trait aussi bien k Toriginc du boiticr portable qu'au contcnu de 
ses iiiformations relatives d'unc part i l-tftat "pcrJu" ou "gagnd" du 
jeu, et d'autre part k la valeur propremcQt ditc du gain accumuld par Ic 
joneur, valtur qui peui ctrc tris impoitaQte. 

L'inventioii propose done xin dispositif dlcctroniquc de jcu dc 
hasard, conipreDant 

a) un boitier portable compTcnant 

- unc intcrface-boiticr d'cntifc/sortic apte h. reccvoir une 
information pr^d^terminte d'automadon dc jcu sans laquclle Ic boatier 
est inapte au jcu, 

- une interface dc communication avec le joucur, 

- des moycns de mfmoire aptcs k stockcr au moins une donnde de . 
reference, 

- des raoycij; de traiteixtcnt-boiiicr, comportani 

. des moycns de compar^ison aptcs k comparer laditc donnfe de 
r£ferencc avec une donnde de jen iiitroduilc par le joucur par 
Imtciface de communication, l"cine dc ccs deux doraifics dtant unc 
valcur gdnfrfe dc fafon alfaioirc, 

. des moycns apics i dtablir une information de gain 
d(£pendant au moins da rdsultat dc ladiie comparaison, ct k stockcr 
cettc infonnaticHi de gain dans les moyens de mtfmoire. ct 

. des moyens de oyptage-boiiicr, apies cn rdponse k une 
infonnation pr£d£tennin£e de demande de paicmcnt re^ue par 
Tinteiface-boitier d'critrfc/sprtie, a.dtablir unc prcmiire va]cur de gain 
cryptfc k partir de laditc information de gain ct k dtflivrer cettc 
premifcre valeur cryptfc k rinterface-boiticr, et 

b) un systftme dc contr61e, extcme au bojticr, comprcnant 

- unc intcrface-systime d'cntrfie/sortie apte k coop^rcr avec 
rinteiface boitier d'entrfe/sorde, ct 

- des moyens de traitement-systime, aptcs, 

. en prtfsence d'unc demande de paicmcnt dmanant du joucur, 
k lire ladite infonnation dc gain contcnue dans Jcs moyens dc mfimoire 
du boitier et k ddlivrer laditc infonnation dc demande dc paicmcnt a 
I'mterface-systcmc d*entr£c/sortie, ct comportant 
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. des moycns dc cryptage-sy slime, homologuas des moyens 
de cryptage-boiticr, aptcs h. dtablir unc dcuxiimc valeur dc gain 
ciypt€e & pardr de laditc informadon de gain lue, ainsi que des 
moy tns de comparaisoa apies k comparer les deux vaJeuis de gain 
crypt^cs; le paiemcnt effcctif du gain au joueur est alors condidonnfi 
au moins par la concordasce des deux valeuis dc gain ciyptfcs. 

Lliomnie du metier sait que le tcrme "altfatoire" associ^ ici h la 
gdn^ration d'unc donn^e dc rfiffircjice ou d'unc donnfc de jcu, est d\mc 
fagon g<£n6rale un concept maih£matiquc, ct que la r£aIisadon 
mat^iielle de moycns de g(£n<Sration "altfatoirc" lendent cette 
gfe^radon pseudo ou quasi aliatoixc, memc si pradqucmcnt il est 
impossible de prdvoir k I'avancc la donn£e ayant 6i6 g6n6T6c. Ijc tcme 
"al^atoire" est nianmoins utilisf ici pour tiaduire I'iropossibilittf 
pratique, pour un tiers dc prdvoir h I'avancc la doimde dc jcu ou la 
donnfe de rdffrencc. 

Selon un mode de realisation Ics moyens de traitcmcDt-systcmc 
sont apies a transmcttrc laditc information pT£d£ten33indc 
d'autorisation dc jcu. Par ailleuis, afin de lire I'informarion de gain, 
les moycns de traiiement-syst£mc sont aptes, cn presence dHme 
de man de de paiemcnt imanant du joucur. a transraettre i I'interface - 
sysi£mc d'eutrtfe/sortie une demande de statut cn riponse h laquelle les 
moyens de traitcment-boidcr d€2ivrent laditc informatiwi de gain ^ 
rintcrface-boitier d'entrcc/sortie. 

Selon un mode de rdalisaticii les moycns de traitement-boider 
compprtent des premiers moyens de g£n6radon aI£atoiic aptes 4 
g£n^rer aliSatoirement laditc donndc de rffcrcncc parmi un ensemble 
pridftcrmini dc valeurs, tandis que I'interface dc communication 
comportc des moyens d'introduction de donnfcs permettant au joucur 
dc cboisir sa donn6c dc jcu parmi le memc ensemble pr£d£tcrmin«£ de 
valeurs. 

Afin d'assurer Ic caiact&re alcatoire du tirage au sort des donn£e5 
dc r(5f£rcnce, les premiers moyens de gcntfradon aleatoire component 
avantugcusement au moins un compieur de jtu fonctionnant depuis un 
instant initial pn£c£dant la reception de laditc information 
pred^tenninec d'autorisation dc jeu, ce compieur dtant susceptible 
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d'etre stoppd a la reception d'unc information d'arret choisie et d& 
in^moriscr la valeur qu'il prisente lors dc son arret dc foncdonnemenr, 
cctte valcur d'anct ddfinissant, laditc drnnife dc i^ffrcncc. 

Uinfozmadon d'arret est dc pr£f£rencc ladue information 
d'autonsatioii de jeu. 

Ea variante, ii esc possible dc conccvoir un jcu dans lequel Ics 
dormdcs dc rifcicacc sent par cxcmplc dcs constantcs iixdcs par les 
r&gles du jeu, les donn£cs dc jeu devant £tre choisies al^toirement par 
le joueur dhmc fa^on analogue k un Ianc<£ de 66s. Dans xine tcUc 
variante Jes moycns dc traitemcnt-boidcr pcuvent componer dcs 
deirdemes moyeos de gfntfration aldatoirc, comniaiid£s par Taction du 
joueur et aptcs a dtflivrer altfaioiremcnr ladatc donnde de jeu, la 
donn€e de rdfdiencc tftant une dormdc pr6d(itcnnin£e stockfe dans les 
moyens de m^oire. 

ASii ..jisurcr lyn^ meUIeure s£c.irit£ dans la vfiiiiicadon dc 
rinformation dc gain, les moyens de mfmoire sont aptes i stockerune 
premiere donnde auxiHaijc prtfd<£icrmin£c, ct les moyeiis dc ciyptage- 
boitier sont aptes k gfndrcr la prcmiferc valcur dc gain ciypt£e k panir 
de ladite infonnation de gain ct de laditc prcraifcrc donn(£c auxiHaiic. 

La premiftic donn^c auxiliaiic est avantageuscment obtenue k 
partir d'ua prenucr cryptagc auxiliaire d'au moins une prcmiire 
information sp^cifique au boJticr telle que son numtfro de sfrie, et est 
pr£sente dans les moyens de mdmoire avant la r£ception dc 
rinfonnadon d'autorisadon de jcu. 

Sc|on un mode de realisation les moyens de ciyptage-btnticr 

comportent: 

^ un gdn£rateur pscudo-aJ<£aioirc dc cryptagc dc gain apte k etre 
imdalisi par une valcur initialc ct k foncdonncr jusqu'i la r€cepdon 
d'unc indication d'arret. la prcmiirc valcur de gain cryptic £tant alors 
va?eur diKvnfe par Ic gindraieur pscudo-al£atoirc de crypugc dc 
gaan k la. r£ccprion de ladite indication d'arret, 

- un premier circuit iogiquc apie k recevoir comme variables d'entrde 
ladite infonnadon de gain et une pardc au moins de la premifere 
donnee auxiliaire stock£c. k appKqucr une premiere foncdon Iogiquc 
predetemunec a ces deux variables d'cntrde et k d^livrer une premiere 
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valeur dc sortie coirespondante» dfifinissarit ladite valeur initialcs du 
g€n£rateur pseudo-alfatoiie dc cryptage dc gain, ct ' 
- un comptcur auxiliairc aptc h compter ou ddcompter depuis une 
valeur initiale-compteur jusqu'^ iine valeur finale-compteur, ladite 
indicadon d'airct du fonctioimement du g(5n6rateur pseudo-altfatoire de 
ciyptage de gaia €iant dfHvitfe par le compteur auxiliairc Jorsque 
ladite valeur finaJe-compteur est arteinte. 

Les moyens de cij^ptage-boMer compieiment ^galement de 
pr^ftfrcncc un second circuit logique apte h recevoir comme variables 
d-entr<Se un.mot binaire pseudo-alfatoire et rnie deuxiime paxtie aa 
moins de la premiftre dpnn£e auxiliaiic stoclc€e. ^ appliquer uoe 
deuxicme fonction logique preddtenninfe a cos deux variables d'entrie 
et h dflivrer une dcuxiftme valeur de soitie correspondanie, difijaissant 
l^tc valeur initiale compteur ou ladite valeur finale compteur. 

Les moyens de traitement-systemc component avaniageusemcnt 
des moyens dc gfnfration pseudo-al€atoire-systime aptes h g6n<£rer 
ledit mot binaire pseudo-aldatoire, cc mot binaire pscudo-al&toire 
accompagaant ladite infoima don de demands dc paiem^nt. 

Afin d'cffectucr la verification de Ja premiere valeur de gain 
ciyptde. les moyens de traitcmcnt-systcme component des premiers 
moyens de ciyptage auxiHajres aptes k cffcctuer IcdSt premier cryptage 
auxiliaire de ladite prcmiare infoimation sp6cifiquc pour recalculer la 
valeur de la premifeic dcimtSc auxiJiaiie; par aillcurs. les moyens de 
crypiage-systimc component des moyens analogues k ceux des moyens 
dc^ cryptage-boitier, et sont aptes a ddienniner la deuxiime valeur de 
gaih cryptfic a partir de la valeur de la premiirc donnie auxiliaire 
rccalculfo ct du mot binaire pseudo-aliatoire. Cetic deuxicme valeur 
de gaia cryptfc sera alors comparie avec la prcmiiic. 

Aim d-effectucr une autre virificarion avant paicment. les moyens 
dc mtfmoire sont avaniageusement aptes h siockcr une deuxiime 
donnfe auxiliains pn£d^tcnnin€e, et les moyens de traitement^sysieme 
sont aptes, en prfscnce de la demande de paiemcnt imanant du joueur, 
a cffcctuer un iraitcment de v£rific?.tion dc la valeur de ccnc deuxitme 
donndc auxiUaire, avant de ddlivrcr ladite information de demande d= 
paiemcnt au boiricr. Ccttc deuxieme donndc auxiliaire peut ctrc un 
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certifacat par mi algorithmc dc codagc k c]6 secritc on publiquc d*un 
autheniifiant sp&ifiquc systfemc de contxolc tcl que le jiiim^ro de 
s6nc d'un tennizial dc vcntc. 

Aiin de virifisr Toriginc du bolticr H est avantageuseinent prfvu 
que les moyens dc mtfrnoirc soicnt aptcs i stockcr. avant la rfception 
de ladite infonnation d'autorisadon de jcu, une donnde 
d'aTithentificatioii du boiiici; la reception de ladite infonnation 
d'autorisation dc jcu est alors conditionnfc k la verification dc cctte 
dotmfc d'auihcntification. 

Cene donn£c d'auihentiiicaiion pcul rfsulter d\ai ciyptage 
d'authentificaiion dWc troisiims infonnation spdcifiquc an bcitier; il 
pent s'agir d'un ccmfic^t du numfro dc sine du boider obtenu a paitir 
d'un algoriihmc de cryptagc k cl6 secrite ou pubUque utilisant une 
autre cl€ que cellc pr£vuc pour la deuxiime donniSe auxiL'aiie. 

Lc« sscy. ... Je trairrrm«nr-$ystanQe coirportent alors de pnJfdrcnce 
des moyens dc cryptagc d'authentification aptcs k rccalculer la domiee 
d'authcndfication a partir dc la troisiime infonnation sp<£cif5qDe pour 
vtfiifier la vaJcur de ccttc troisiftme infonnation sp&ifiquc lue dans les 
moyens dc mfmoirc. 

Lc numdro dc s€ric du boider pcut ctrc pn£sent dans les moyens dc 
mfmoirc du bmticr. B pcut dgalcmcnt ctic lu par un moyen dc lecture 
appropri6, par e;ccn3ple par un Icctcur optique si lc num^ro de sdrie 
figure sous fonne de codc-barres sur une dtiquette fix£e sur le boMcr. 

Scion un mode dc realisation les moyens de mdmoijc comportcnt 
deux mfmoircs. Tune d'cntre dies contenani la premifexe donntfe 
ausdliaixc^rautrc contcn^t d'abord la donn£c d'authcndfication puis. 
?-pr*s v£rii=«^-on de ccitc demicrc, la dcuxieme donn6c auxiliaire. 

Par aillcurs les moyens de mimoiie peuvcnt comporter un 
comptcur d'6tat aptc h contcnir une infoxmadon d'etat rcprfscntadvc 
du resultat du jcu, ainsi qu'un comptcur dc paiemcni apte i contcnir 
une information de paiemcnt rcpp£scntative d'un paienjent 6ejk 
cffectue ou non encore cffectud au joucur. 

En prdscnce de la dcmande de paicment €n3anant du joucur. les 
moyens de traitcmcnt-sysicme sont alors aptcs h lire cn outre Ics 
contenus des comp.curs d'dtat ct dc paicment avant de d«ivrer ladite 
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ioformadoii dc dctnandc dc paicmcnt au boider, 

Le boiticr comportc avantageusemcnt des moyens d'alimentation, 
autoiisant le fonctionncmcnt de cemiris au moins de ces moyens, tels 
que les compteurs dc jeu et les mfmoircs, avant la T^cepdan de 
I'lofoimation d'autorisation de jeu. 

Le boitier est avantagcusement inapte au jeu h ]a suite dtine 
comparaison cnirc une donnie dc rifdrcnce et line donn£e de jeu 
representative d'un jeu perdant et/ou apris un paiement effeciif au 
joucur. 

L'intcrfacc dc communication compoxte dc prdfircnce des moyens 
de restitution au joucur d'line information dc r^sultat reprtfsentative du 
r£sult3t de la comparaison cntre les donnfies de jeu et de leffrencc, lui 
indiquanc s'il a perdu ou gagn£. 

Scion un mode de realisation . de Tinventibn les moyens de 
m£moire sent aptes h stockcr une plurality de donn6es de r£f£rence, et 
UDc pluraliid de donndes de jeu sent snscepdbles d'etre iniroduites par 
le joueur. 

Ces dcnndcs dc jeu pcuvcnt etic introduiies successivement, 
chaque donn£e dc jeu introduite dtant compar£e ^ une donnic de 
rifdrencc pr£d6icT7nin6c; une dermic de jeu ne pent etre introduite par 
I'interface de conununication qu'cn cas d\ine concordance entre la 
donn^e de jeu pttfc^demment introduite et la donn^e de r6f«£rence 
correspondante, et & chaque concordance correspond une information 
de gain diffirentc. 

L'information dc risultat comporte alors avantageusement 
I'affichage d'unc information dc niveau de gain corrcspondant i 
I'mformation de gain contcnuc dans les moyens de mcmoirc. 

Les moyens de mfmoire component de pr^fiSrence un comptcur de 
gain apte h. contenir succcssivemcnt des mots binaires de gain 
prdd£ceimih£s rcpr^scntatifs des informations de gain successives. 
chaque mot bin&ire diff£rant du mot suivant et du mot pr€c^dent par 
au jnoins deux bits. Ccci permet d'avoir des mots binaires 
suffisammeni diffdrcnis les uns des autres, afin dc bien diffiSrcncier 
les informations dc gain corrcspondanies ct d'eviter noiammeni des 
crreurs occasionn&s par cxcmple par une mauvaise lecmre ou 6criture 



2697653 



8 



d'un scul bit. De merae le compicur d'etat est avantageusement apte a 
conienir successivement des mots binaires d'ftat pr£dftciiiuD6s 
rcprfsentatifs des informations d*£iat successive:,, chaque mot binairc 
d'€tat difKrani du mot suivant ct du inoi prfc^deni par au moins deux 
bits. 

Lorsque plusieurs donn£es d& jeu doivent etre introduitcs par le 
joueur, notaniiDCDt successivement, les prcmieis moycns dc gdn^radon 
al^atoire component dc pr£f£rence une pluraliif dc conipteurs de jeu, 
chaqiie compteur fitant susceptible de contenir une dormfc dc T£f<£rence* 
et est associd a uae introduction de donn£c dc jeu par le joueur. On 
peut aiors pn£voir que la rfcepdon dc ladiic information d'autorisation 
d© jeu stoppc le fonctionnem ent de tous les compteurs, la plurality de 
donndes de riKrence 6tant alors la plurality de valeurs qu'avaient les 
compteurs k la r&cption de cette information d'autorisation de jeu. En 
d'a'jces tcmicj;, ie tsLage au suii ucs donn£es de r£f£r,n3ce est effectu6 
une fois pour routes avant rintroduction des donnies dc jeu par le 
joucTxr. On peut cependanc prdvoir qu'un tirage au sort s'effcctue pour 
chaque donnfe dc jeu introduiic. Dans cc cas un scul compieur peut 
etre associ(£ a toutcs les introducdons successives des donnics de jeu 
par le joueur, rintroduction d'une dormfe dc jeu par le joueur fige 
alors le compteur conrespondant a uae vaJeur ddfinissant la valcur de 
reference assod€e i cette donn£e de jeu. 

Lc systferoe de controle compone avantageusement unc interface 
dc dialogue avec le joueur apte k rcccvoir ladite demande de paicmcnt. 

Cctte interfece dc dialogbe peut etre utilisdc k d'auircs fins. Aina» ca. 

presence dNjne demande de vilification d'infonnation dc gain fmanant 
joueur, les moycns de traitcmcnt-systcmc peuvent lire Ics contcnus 

des compteurs dc gain, d'dtai, ct de paiemcnt ct commumqncr Ics 

risultats de ccne lecture sur rinterfacc de dialogue. 

Le sysiftnie de controle peut componcr au moins une station, teUc 

qu'un teiminaj, et de prefdrencc une plurality dc siadons dc structure 

analogue, les infomiarions d'autorisation de jeu et de demande dc 

paiemcnt pouvant etre dtflivrdes par la meme station ou par deux 

stations diif6renics. 

ATin d-effectuer unc autre verification, noiammcnt lorsque lc gain 
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est important, le sysi^mc de contxole comporle avsntageusement des 
moyeas de siockagc d'unc Uste d'autbcnrifiants.dcs boiders gagnants 
et payfs. et cn prdscnce d'unc demande de paiement &nanant du Joucur 
et correspondanc i un gain sup(£ricur k une valcur de gain 
pr^dftcimintfe, Ics moycns dc traitement-systfemc sont aptcs ^ v£rifier 
si l-authentifiant du boltier concern^ se sitae d6j4 dans ladite liste. 

L'invention a <?galcment pour objct un boitier et un systeme de 
controls appajtcnant i un tcl dispositif flcctroniquc dc jcu de hasard. 

D'aiitres avantagca ct caractiristiques dc I'mvcntion apparaltront 
k rexamcn dc la description ditailld d'un mode de realisation 
nullemcnt limiiatif ct illustnS sur Ics dessins sur lesquels : 

- la figure 1 rcpnSscntc schiroatiqucmcnt unc station ct un boiticr 
selon rinvcntion, 

- la figure 2 iUuscrc un rfscau de stations, 

- les figures 3a. 3b, 3c rcpnJscntcnt plus en detail Ic boWcr dc la 
figure 1, 

- la figure 4 icpr6scntc un icran d'afficbagc du boidcr, 

- Ics figures 5. 6 ct 7 reprdsentcnt dcs synopdques schfmaiiqucs 
de rarchitecturc c5bl£c d'un coraposant ASIC incorpord au boWcr. et 

- les figures 8. 9, 10a. 10b. 10c repniscntcnt des organigrajnmcs 
de fonctionnenicni du dispositif ct de mise en ocuvre du jcu. 

Tel qu'illustnS sur la figure 1, le dispositif dlectionique dc jcu 
componc un bt^tier portable U ct un sysicme de controlc 12. cxTcine = 
au bolder 11. ct comprcnant inicrface-systftmc d'cnirfe/soitie 17. 
comportant ici deux plages de cuivrc 17a ct 17b aptes k coopdrer avec 
des plages cuivre hom'oJogucs dW inteifacc-boiticr d'cntrdc/sortie du 
bolder 11 afin de r£aliscr un ^change de donndcs par un couplage 
capacitif. 

Outre cette infcifacc d'cnirtfe/sortie 17. 3e systeme dc controlc 12 
componc dcs moycns dc traitcment-systcme 16 conncctcs k cene 
inferfacc 17 ainsi qu'a unc interface de dialogue 13 avec un uriKsateur 
tcl que le vcndeur ou I'agcnt payeur. Cette infcifacc de dialogue 
componc un fcran d'affichage 14 ainsi qu'un clavier 15 pour 
rintroducdon d'infomiations dc commande par cxemplc. 

Les moyens dc trajicmcnt-systemc 16 sont incorpor^s au sein 
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d'une cane flcctroniquc architccruxfc autour d'un micro-control cur 
dialoguant avec i'intcriVicc 17 par rinteimidiairc d'un rcgistre 
d'eatrSe/sortie 88. Commc on Ic veira plus en details ci-apris lors du 
fonctionncnient du disposiiif, ]es mbyens de traitement-systime 16 
comportcnt dcs moyens dc cryptage-systame 19, dcs premier ct 
deuxifemc moyens dc cryptage auxiHaires 20a ct 20b. dcs moycns de 
cryptage d'auihcniificEtion 21 ainsi que dcs moyens de g6i(£iation 
pseudo-al«£aioirc sysiiroc 22 apicni I gdniicr un mot binaire pscudo- 
a:6atoire dont la signification sera expliqufc ci-apris. Mattfrieilcmcnt, 
ces diffirents moyens soni r£alis£5 de fafon logicieUe an sein du 
micro-controlcur dcs moyens dc txaitcment-systcme. 

Sur la figure 1, les moyens de traitemcnt-systcmc 16^ rinierface- 
systamc d'entrfc/sordc 17 ci Tintcrfacc de dialogue 13 sont 
mattfriellement regroup^s au scin d'une station telle qu'un tenninal. On 
prnt k cet ?f pr^voir d'utiliscr rni micro-ordinatcur classique, tel 
que par exemplc celui connu sous la marque PC de la soci£t£ IBM. 
Dans cc cas. l inicrface dc dialogue 13 comportcia r«icran ct Ic clavier 
da micro-ordinatcur. On pcut alors prfvoir unc cane flcctroniquc 
suppldmcntairc cjifichablc dans Ic micio-ordinateur ct incoiporant Ics 
moyens de traitcmcnt-systimc, ainsi quWc extension r£alisant 
I'inicrface 17. 

Bien que d'une fafon g£n£ralc, le systime de controle puisse ctre 
incbrpor6 au sein d-une sculc starion, il est pi«£vu d'utiUscr ui nSseau 
de stations 12 (figu-c 2) ayoni toutcs une structure analogue. Ccrtaincs 
au moins dc ces stations pcuvcnt €tre reli&s h dcs moyens de stocJcage 
23 aptent i stockcr. commc on le vcrra plus cn d£tails ci-aprts, vine 
li.«e d'auth£ndfia.".is dc boI;icrs ayant abouti H un jcu gagnani ct ayant 
donnf lieu i un paicmcnt cffectif ou joucur. 

Lc bolder 11 a dcs dimensions hors lout lui pcrmctrant dc tcnir 
aisfiment dans unc main. U componc sur sa face avant (figure 3a) unc 
touche 24 pcmjcttant dc Jc .mctiie sous tension pour aciivcr ccitains au 
moins dcs moyens Ic constimant. commc par excmplc I'dcian 
d'affichage 28. Par ailleurs. il est pr£vu. dans cct cxemplc dc 
realisation rrois touches dr, jcu 25. 26 et 27, sur lesquelles sont 
rcspectivcmeni inscrits irois chiffres (1, 2 ct 3) reprfscntant trois 
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donndes de jeu panni IcsqucHcs le joucur pcuira faire son choix. 

Sur sa face arriirc (figure 3c) se trouve mie ftiquctte sur laqucDe 
figure par example en code baire, lo num^ro de s£rie NS du boMen Ce 
numfTO de siiic constituc ici un authentiiiant unique et sp&:iiique au 
bolder. 

La figure 3b iUustrc sch<£matiq^emenr unc vue interne du bolder 
n. On y trouve les cmprcmtcs «cciioniques 21. 32. 33 et 34 des 
touches 24, 25. 26 ct 27. Deux plages de cuivre 29 et 30. faisant partie 
done mterface-boitier d'entr^c/soitie. sont aptes h coop^rer avec Ics 
deux plages de cur/re homologues 17a ct 17b d'une station 12. Des 
mo-.cns d'alimcnmion autonomcs 35 et 36, tcls 'que les piles, 
pcnuettcnt d'assurcr Ic c«ract4rc autonome du botticr portable et 
scrvcnt. comme on Ic vcrra ci-apris, ^ aJimcnter de fai^n pcrmancnte 
certains des coniposants du bolticr. 

AJors que Jcs trois touches de jeu 25, 26, 27 ct r&iHn d'af^chsge 
28 fonncnt une interface de communication avec ]c joueur, un Aliment 
esscntiel de Tinvc^don consiste ici cn un circuit intf-^ cShH 
^P^cifique (ASIC: Application Specific ihtegiatcd Ciicuii) ponant la 
rdffircnce 37 ct incorporant comme on le vcrra plus en ditails ci-apris. 
des moycns de traiiement-boldcr ainsi que des moycns de mimoiie. 
Cct ASIC est relid par un rtfscau de connexion 38 aux touches dc jeu, 
aux moycns d'alimeniadon. ninsi qu'i I'&ran d'affichage 28. Bien 
entendu. on auraii pu utaiscr. a ]a place d'un composant ASIC, un 
micro<onn-61eur incoiporant de fafon logicielle ceitaincs au moins 
des fonctions du boitier qui seront d&ritcs ci-aprfes. Nianmoins, 
luuhsanon d'un coniposant ASIC pcnnct de i€duire les couts dc 
fabrication et augmcnte la s<£curiti du disposidf selon IWndon, 
centre la fraude. D cn cffet plus difficUc. pour un ftaudeur, 
dacc^der ct de coniprendrc rarchitccmre d'un schima de cablage 
si^quement rtab'stf pour unc application ct incorpoi^ au sein dVn 
ASIC, que d'acoEder aux ins.rucdons d'un programme incoipord au 
sexn d'une mfimoire de programme d'un micro-controleur. 

Sur la figure 4, est rcprdscntd un dcian d'affichage 28 tcl qu'il est 
susceptible d-apparairn: au joucur dans I'appUcarion spdcifique de jeu 
qm est dccrite dani cci cxcmplc. En bas de I'fcran d'affichage sont 
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pi&vns deux espaces GA et FI dans lesquels sont susccpdbles d'etre 
affiches les expressions "GAGWE" et "FIN" scion que le joucur a 
gagni ou perdu dans son jeu de hasard. Snr l,.s deux bords latiraux de 
r^cian d*affichagc sont dispos6s icspecrivemcnt deux colonnes 
d'cmplaccments mim^rotfs 1, 2, 3, 4, 5 et 6. 7, 8, 9, 10. Ces 
emplacements portent Ics rtffdrcnccs NGI-NGIO et correspondent i des 
affichages de niveaux de gains succcssifs. atieints par Ic joueur lors de 
son jeu. Au centre de Wcran d'affichage, figurent des emplacements 
pour trois flJches F respectivement posiiionn^es en regard 
d'emplaccmeuts circulaires Nl, N2 et N3 a rint(£rieur desquels sont 
materialises les trois chiffres 1, 2 et 3. Commc on le vcrra ci-apr^. 
I'une de ces fl&chcs F va mat£rialiser le choax du joucur apris que 
celui-ci ait appuyf sur I'unc des touches de jeu 25 k 27, tandis que I'un 
des emplacements. Nl, N2 ou N3 matirialisera la donn(£c de r^f£rencc 
tir€c au hus^d par le u-oincr iui-meme. 

La figure 5 reprfssnte sch£matiqucmcnt unc panic des moyens 
incoiporfs au sein du composant 37. On trouvc tout d'abord un regisoc 
d'entr^c-sorde sfrie/paraliyc 39, iaisant partic de l-intcrface-boitier 
d'entrife/soitie. ct relif aux deux plages de caivre 29 et 30. A cc 
registry 39 est reli£ un circuit d£codeur 40 apte ^ d£codcr les divcrses 
iftfonnations reyues par le registrt 39 (cnti£c/sortie. dcrirure, lecture). 
Ce circuit dtfcodcur 40 est xcM k un circuit dc mise en forme 51, 
connect^ cn premier lieu a un comptcur d'dtat 48, tcl qu'un compteur 
non Knfaire. susceptible dc contcnir une infoimarion d'£tat 
repi€sentaiivc du rfsultat "perdu'-' ou "gagnd" du jeu. en deuxifcme Ueu 
a un compteur 49 susceptible de contcnir une infoiroation 
representative d'un paicment ayant 6t£ r£eUcmeni cffectu£ au joueur, 
et cn troisitmc lieu a un compteur dit de gain 50. tel qu'nn compteur 
non lindairc, apte k contcnir une infom>«ion dc gain dfpendanl du 
rfsultat du jeu. En r£ponse k une :;sni2nde de statut. le circuit de misc 
en fonne est apte k d£Hvxer au rcgistre d'entr£e/sortie 39 les contenus 
CI, C2, C3 des trois compicurs pr£cit£s 48, 49 ct 50. 

La sortie du compteur de gain 50 est £ga]cmcnt reli£e a rentr£e 
d-un premier circuit logique 47 dont I'auirc cntr£e est rclide h une 
premifere mfmoire vive Ml. La sortie du premier circuit logioue est 
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iclife ^ Ma g6n£rateur pscudo-alfatoirc dit dc cryptage de gain 46, tel 
qu'm compteur polynomial ou un gdnfraicnr cyclique, conunandfE 
^galement par un comptcur auxiliaire 45 rcccvant en cntr<Se ]a sortie 
dhm dcuxi&mc circuit logiquc 44 dont Ics deux entr&s sont 
icspectivement icKeSes i Ja mtfmoirc Ml ci au registre d'cntr^ sortie 
39. La sortie du giniratcur pscudo-a]£atoire dc Ci>ptagc- dc gain 46 est 
lelide au registre 39. 

n est fgaJcment pr£va dcs moyens dc controle logiques 41 dc 
rcnsemble dc ces moycns, cadenc6s par un signal dTiorloge CLX d'une 
frequence par excropJe de 500 kHz. ddKvrtf par un osciUatcur 43. 

Une autre nidmoire vivo M2, rclife au registre d'cnti^c-sortie 39 
fait paitie, avcc la mfmoire Ml, dcs moycns de mfmoirc du boTticr. 

Les figures 6 et 7 illustrcnt plus cn ddtail des premiers moycns de' 
gfofration al6atoirc aptcs h gfndrcr les donntfcs dc rdffrcnce qui 
seront comparScs avcc Ics donnfes introduiics par Ic joueur. 

La figmc 6 est .reprfscntativc d'un mode dc realisation applicable 
a un tiragc au sort, effccta£ une scule fois pour unc pluiaut£ de 
donnfcs dc r£f£rcnce succcssivcs (dix par cxcrnplc) concspondant 
lespectivement i des introductions potcntielles succcssivcs de donndes 
de jeu par 1 c joucur. 

. Une pone logiquc ET 52 rcfoit cn cntrfc le signal d'horloge CLK 
aiasi qu-une infonnation d-autorisarion dc jcu DV dont on rcviendra 
ult&ieurement plus en detail sur la signification. La soitic de cettc 
porte logique 52 est nU6 au p-niier compteur modulo 2 (53-1) d'une 
rangfe dc dix compicuTS 53-1 i,53-lQ reliis cn cascade les uns aux 
autres ct dont les sonics sont respcctivcmcni rclidcs aux dix entries 
d-un multiplexcur 54 dont la sortie est reli<£e k la prcmiire cntrfe d'un 
comparateur 55. Chaquc comptcur est done susceptible d'afficher un 
contenu coirespondant ^ Tun des trois chiffrcs 1, 2 et 3. Ce 
multiplexcur 54 est commands en cc qui conccmc le choix de sa voie 
d'cntrfc par la sortie du comptcur dc gain 50. L'autrc eniifc du 
comparatctir 55 recoil Ja valcur VJ de la donn^e dc jcu introduite par 
le joueur. La sortie de ce comparateur est relive au comptcur dctat 58 
et au compteur de gain 50. ' 

Comme on le vcira ci-aprCs, la figure 7 illusrre un mode de 
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rfaJisation plus paiticuliaremcnt adapif, soit & dcs^dragcs au sort 
succcssifs associds Tespcctivctjcnt aux introductions succcssives dcs 
domi€es de jeu par le joueur, soit ^ une g^6ration al^atoire d\me 
donnfe de jeu qui serait analogue par cxcmple & un Ianc6 de d£ de la 
part du Joueur. Dans ce demicr cas, ]a donn6e de r£f£ieiice qui sera 
comparfe avec la doniife de jeu gSnSiie ai^atoiremcnt, pouira ctrc une 
constante m£inorisdc dans Ics moyens dc m£moire du boirier, Sur ce 
mode de realisation, la poitc Jogjquc 52 rc9oit ft la place de 
rinfomiation d'autorisation dc jeu DV le sijgnal d'introduction ACJ 
d'une donnde dc jeu par le joueur sur rintcrfacc de communication, n 
n*est alors pr£vu qu'un seul comptem- 53 rclii i ccttc pbrte logique 52 
et dont la sortie est reH£e k la premi&re cntrfe du comparateur 55. 

On va maintenant ddcrire plus en dftails, en se r£f£rant plus 
particuliireinent aux figures 8 h. 10c le fonctionnement du dispositif 
selczi I'lnvendon. 

Lors de la fabrication en usine (tftape 56) une premiere donnde 
auxiliairc ICl est inscrite dans la mfmoirc Ml tandis qu^me dormde 
d'auihentification IC2 est inscriie dans la rofmoirc 2VI2 (6tape 57 et 
£t^>e 58). La premi&re donn£c auxiliaire ICl constitue tme premiere 
5£curit6 qui sera udlis6e lors du paiemcnt effectif du gain au joueur. 
EUe r£snlte d'^xac faqon g£n£rale d*un premier cxyptage auxiliaxre 
d'une infonnadon spdcifique au boSder. Plus prfcisiment. il s'agit par 
exemple d'une infonnaiion cryptfe obienue Sl partie du numfio de s^iie 
NS du bolder par un algorithme de cryptage du type k clef secr&te, tel 
que celui connu sous le sigle DES (Data Encryption Standard) et 
utilisant h cet effet une prcmiire clef secrete, H serait dgalement 
possible d'utiliser un algoiithme de cryptage h cl6 publiquc lel que 
celui coonu sous le sigle RSA (Rivest Shamir Adcbnan). 

La doiHiie d'auihentification IC2 consiste ^galcment en un 
cryptage d'authentification d'une information sp&rifiquc du boitier. 
Concrfetement, U s'agit dVm cryptage du numfiro de sCrie du boMer k 
paitir d'un algorithme k clef secritc (ou dvcntucllcmcRt publiquc). 
avec une clef diff€rentc de ccUc uiiUs£e pour I'infonnation ICl. Cctte 
donnie rC2 est en fait un ccrtifjcat du numiro de s£ric NS. 

Afin de preserver Ics contcnus dcs mdmoircs vives Ml ct M2, le 
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boitier sera alimcnuS par ses moyens d'alimenration en permanence 
depuis sa fabrication en usine. De ce fait, lesdits cqmptcurs 53-1 a 53- 
10 foncdonncnt depuis le stade dc fabrication da boitier en usine. 

N€ai3inoiiis. h ce stadc, Ic boitier est inapte an jeu on vcnouiUiS. 
En d'autres tcimes. les moyens de traitement-boMcr sont inactifs ct un 
joueur, qui viendrait ^ ctri en possession d'un tel boitier, ne pourrait 
pas introduirc de donnfcs dc jeu h I'aide dcs touches 25-27. 

A sa sortie dHjsinc, le boitier est stocIc<£ dans un local de vente 
6quip6 d'mie station de controlc 12. Lors de la ventc d\in tel boitier a 
un joucur. il est tout d'abord pxocfd6 h une vaKdation dc celui-ci 
(^tape 59), Lc boitier ftant dispose sur I'interface-systfemc 17, les 
moyens de traitemcnt-systiine 16 procidcnt h une lecture du contenu 
de la mfmoire M2, et les moyens de ciyptage d'auihentificaiion 21 
recalculent, h partir du bumfro de sdrie NS ct de la valeur de la clef 
secr&tc utilisde (prtfsentc £galemmt dans des moyens de mfcicire dc U 
station)., la donnie d'authentification IC2. A cet cffct. les moyens de 
traitement-systfane pcuvcnt avoir connaissauce du nuinfro dcj sfrie NS 
du bolder soit en raisoa dc son stockagc diiectemcnt dans la ni6moire 
M2 du boitier, soil par une lecture optiq-ae h raide d^ln lecteur 
approprii. du code barre situ£ sur la face aixidic du boitier. La 
concordance de la donndc de d'auihenficarion recalculfc avcc ccUe qui 
tftait pnfsentc dans la m«Smoire M2 avant cene ^tape de validation 59. 
pennet d'effecnier une premiftre v6rification sur I'oiigine du boitier et 
de s'assurer ainsi qu'il s'agjt h priori d'un bolder authentique. 

Une fois cctie verification sur I'oiigine effectu6e.les dcmtifcmes 
moyens de cryptage auxUiaire 2bb dcs moyens de tiaitcmem-systfeme 
diierauncni une dcuxiime donn<fc auxiliaire ciyptfc IC3 a partir 
dgalement d\jne information spfcifiquc a la station cffccmant la ventc 
ct d-un algoriihme de cryptage h clef sccrite (ou dvcnmcUcmcnt 
publique) utilisant une troisiftme clef diffirenie des deux prcmiferes. 
Pratiquement. les deuxiimes moyens de cryptage auxiMaires uriliscnt 
comme infoimation spdcifiqne-siatdon. son numtfro de s£ric, la date de 
la vente ainsi que le num«£ro d'ordre de cctte ventc i cettc date, et 
dftcnninent le ccrtificat ciypt^ dc cettc information spddfique-staiion. 
Les moyens dc traitemcni-systcme stockent alors dans la m^moirc M2, 
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cette infonnaiion sp^ifique* station ainsi que le certLGcat IC3. 

La concordaiKy, de la donnfe d'autbentification IC2 siockfie dans 
la m£moire M2, avec celle I'ecalculde, a fgaJement pour consequence 
remission par les moyens de traitemeut-syst^me de la station, de 
rinforxnanon d'autorisation de jeu DV qui a pour effet dhine part 
d'activer les moyens de traitemcat-boStiex pour rendre le boiiier apte 
au jeu, et, d'auire part, de stopper le foDctioimement des compteurs de 
jeu 53-1 h 53-10. Cette infonnation d'autorisation de jeu ainsi que la. 
demande de stanit soni en fait dcs comxaandes paniculi&res ^mises par 
la station, et & la rdception desquelles les moyens de traitement-boitier 
effectuent des cpfrations pr£ddteraun6es. H convient dc reraarquer 
que, dans ce mode dc realisation, Ja plurality de donndes de rdfirence 
est alors la plurality, de valeurs qQ'avaient les compteurs 53-1 k 53-10 
^ la r6cqption de rinfonnation de d'autorisation de jeu. Ces donn€es de 
rdfdrcsc. Tn<*nQoxis£e5 dax!» les compteurs 53-1 h 53-10 en vue 

de leur compaiaison avec les donn6es de jeu. Le tirage au sort de 
loutes ies doimSes dc rdffreiicc a done 6t6 effectu6 une seule Fois- Par 
ailleuxs, la cadence rapidc de foncrionnement des compteurs ainsi que 
le caract£re aJdatoirc de I'instant de misc en march e des compteurs h. 
I'usine de fabrication ct de I'instant de reception de I'information DV 
contribuent au caractferc "al&uoire" de la gdndration des donnfes de 
rfif frence. 

Bien eniendu, dans variante illustr^e sur la figure 7, concemant 
des tirages au sort -.ujccssifs de donnfies de reference, la reception de 
I'infoimation' d'autorisadqn de jeu DV n'a pour seul effet que 
I'activation des moyens de traitcment de boStier, et le d^verrouillage 

de ceiui-ci afin de !e rendre apte au jeu. 

Le joueur est maintenant cn possession d'un boiiier avec lequel ii 
pejatjouer. 

La phase de jeu propremeni dite 60, correspondant ici h un 
exeniple bien paniculier dc jeu, est illustrfc plus en dfitail sur la 
figure 9. Lors de la mise cn marcbe du boiiier (£tape 6l> par pression 
sur la louche 24. I'dcran 28 affiche (dtape 62) les chiffres 1, 2 et 3 
dans les emplacements Nl. N2 ct N3 ainsi que le mveau de gain 
antdrieur. Si le joueur n'a jamais joud avec ce boTUcr, jl n'y a bien 
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entendu aucutn affichagc dc niveau de gain ant^rieur. 

Dans I'£i2pc 63, Ic joucur choisi tin chiffre et actionne la touche 
25-27 coiTcrpondantc ce qui materialise i'introduciion de sa donn^e de 
jeu. La flichc F, cn regard de remplactment Nl, m ou N3 
corrcspondant au chiffre choisi par Je joucur, s'affiche et Ics moycns 
dc tiaitemcnt-bofdcr acdvcnt alois un logicicl d'animation visucUc, 
communtfrncnt appcl^S "chcniUard" par ITioinme du metier, ct ayant 
pour cffct de provoquer unc rotation, sur V6cTan d'affichagc 28 des 
chiffrcs 1, 2 ci 3 simulant ainsi le mouvcment d'une roulcnc dans un 
jeu de roulttic. chcnillard simulc cnsuitc la dtfc6Hration dc la 
roulette ct Je chiffre corrcspondant h la domj<£e dc reference conienue 
dans Ic prcmitr compteur de jeu 53-1 s'affiche' h remplaccment 
corrcspondant sur I'licran d'affichage 28 (ftapes 64. 65). 

Si le chiffre s'offiche en face de la fleche F qui ixiat(£rialisait la 
donnde de jeu cboisic par Ic joucur (6tape 67), celuiKrl a gagn£. Dans 
ce cas, I'cstpression "GAGNE" s'affiche i remplaccment GA ct Ic 
niveau de gain 1 s'affiche h remplaccment NGl. Dens le cas contraire 
(£iapc 66). ccct-a-dirc si le chiffre corrcspondant h. la donn<£c de 
rffdrepcc ne s'affiche pas cn regard dc la fliche F, Ic joucur a perdu ct 
i'cxprcssion "FIN" s'affiche dans I'cmplaccmcnt FI. Dans un tel cas, 
les moycns dc traiicmcnt-boitier vcrrouiUcnt (itapc 68) Tintcrfacc de 
communlcatjon- avcc le joucur en cc sens que cclui-ci ne pcut plus 
introduirc "dc donn6c dc jeu ^ I'aide des touches 25-27. En d'autrts 
tcrmes, le boTdcr est rendu k nouveau inaptc au jeu et pcut 6tre jet6 
, par excmplc. 

Dans Is cas d'un jeu gagnant, le joucur k deux possibililfe. Soit il 
dfcidc d'arrdtcr dc Joucr ct dc dcmander le paicmcnt de son gain cn se 
prdseniani h unc station 12, soit il dfcjde dc tenter sa chance unc 
nouvcUc fois cn choisissani h nouveau une donniSc dc jeu qu'il 
introduit k Jaidc des touches 24-27. Le diSroulement du jeu s'cffectuc 
alois k nouveau scion les dtapcs 63 k 66 ou 67. Dans le mode de 
realisation iJlusirfi sur la figure 6. le contcnu du compteur dc gain, 
permei dc *£Jcciionncr la voie d'entr£e du multiplexcur 54 puisque cc 
compteur de gain componc unc infoimalion dc gain diff£rcnte pour . 
chaque cs::sj ys^jnani du joucur. Aussi, dans le cas present, lors du 
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deuxjeme • essai, le dcuxicr.ic comptcur' 53-2 de la chaine sera 
ssIecdoEcS et son ccrjicnu corrcspondant h. la deuxifemc valeur de 
rdf£rcnce sera compare h la dojvnfe de jeu introduitc par le jouexir. Lc 
joucur peut ainsi tenter sa chance dix fois de suite pour espdrer 
aueindrtt le niveau de gain 10. A cljaquc nouvel essai gagnant, son 
niveau de gain actucl s'afficbc ct esc sup£rieur au niveau dc gain 
pr^cfdcDU Par contre, si au cours de cc cbeminenient. un essai devient 
perdant, le boidcr devicni inapic au jcu et le niveau de gain prfc^dent 
reste afnchfi. Bicn enicndu. lc joucur nc pcut tenter un essai suivant 
que s'il a rfussi h Icssai prfc^dent, c'cst & diic si il y avait 
concordance entre la donn^c dc r£fdrencc associiJe h. son essai 
pr€cddeiit et la donndc dc jcu qu'il avait alors inn-oduite. 

Dans le mode dc rdolisation illmtri sur 3a. figure 7, les dix 
donndes de r6f(£rencc corrcipondant aux dix niveaux de gain nc sont 
pas prcd^;. "n-fce 3k I'avancc. Le compteur 53 foncdonne jusqu'a 
I'acdonncmem d'une louche 24-27 par le joueur roat^rialisant son 
choix d une donnde dc jcu. Ccrtc action ACT bloque alors Is compteur 
53 a uDe valour ddfinissant h la vaJeur de r€f<£rence g(*ijin£e 
aJcatoiremcnt ct associdc h Imtxoducdon dc la donnfie de jeu par le 
joueur lors de son essai. Apris I'affichagc d'un rdsultat gagnant 
fivcntueUe, le foncdonncmcnt du comptcur 53 sc poursuit et cclui-ci 
sera k nouveau fig<£ ^ unc auurc valeur Jors dc riniroduction ^ventueUe 
ultirieujc d'ime autre donntfc dc jcu par le joueur. 

La vaiianie dc la figure 7 est igalement compadble avec ua autre 
syps de jeu corisistani ccttc fois ci a comparer des donndcs de 
rfference constamcs prdddtcrmindcs et stockics en m«£moiie. avec des 
dc^sics dc jeu iniroduiics dc fa^on aieatoire par ie joueur. On simule ' 
ainsi mi lanccmcnt dc dds par Jc joucur. Dans cc cas, la reception du 
signal a ACJ, provoqud pr:r I'acdonncmcnt d"une louche appropri^e sur 
le bolder par le joueur. provoquc I'airct du comptcur 53 mat£rialisani ' 
la genfirarion aieatoire dc la donn^e de jcu qui sera cnsuite comparee a 
la valeur de reference Cddj.igni£c ici cgalemcm par VJ> stockdc en 
ni^moire. 

Dans le cas ou u,t joucur ayant gagn6 ct ayant atteint un certain 
niveau de gain. d6cidc rJc n-, plus joucr ct de demandcr lc paiement de 
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ce gain, il procfcde alors ^ uuc dcmandc de paiement 69 auprfes d'une 
station 12 qui va proci£der alors a une pha^c *de vfrification 
approfondie 70. H convient dc notcr id que le joueur peut demander 
ce paiement aupi^ de la meme station qui lui a vendu son boltier ou 
auprfts d'une station homologue. 

On se rfftre maintcnant plus paiticulicrement aux figures IGa i 
10c pour dfcrirc cctie phase dc v(£rification. 

Celle-ci commence tout d'abord par une vfirification visueUe 71 de 
la pan de Tagent chargtf d'effectucr le paiemenL Cette verification 
visTJcJlc consistc i verifier I'affichage dc I'expression "GAGNE" ainsi 
que raffichagc d\m niveau de gain. Si aucunc anomalie 72 n'apparait. 
Ic boitier est alois plac<£ sur rinterface 17 d'cntr<Jc'Sortie de la station 
et les moyens de traitcment-systftmc dflivrcnt au moym de traitement- 
boitier une demand© de stanii ((Stape 73). A la xrScepnon 74 de cctte 
demande de statut STl. les moyens de oaitcment-boMcr dtfKvient aa 
rcgistrc d'cntrfe-soitic 39 les contenus respectifs CI, C2, C3 dcs 
comptcurs 48, 49 ci 50. ainsi que le contcna de la mtfmoire M2. Les 
contenus respectifs CI, C2. C3 sont alors affichfs en "clair" sur 
r^cian 14 de I'interface dc- dialogue de la station (^lape 7S). Ccci 
consrinie une autre verification visuelle qui cependant ne fait pas foi 
pour le paiement effccdf du gain au joucur. comme cela sera expHqufi 
ci-aprfcs. 

On passe ensuitc h une <Jtapc de verification 81 consistant a 
verifier la valcur dc la dcuxiimc donn£c auxiliairc IC3 contenue dans 
la memoire M2, Pour ccia, les dcuxiimes moyens de crypiage 
au3dliaire 20b des moyens dc traitcment-systime dc la station liscnt 
I'infonnation specifique-station (numdro dc serie de la station, date de 
la vcnte ct numero d'ordre) dans la memoire M2, et iccalculcnt le 
ccrtificat IC3 de cctte infoimaiion specifique pour le comparer k cclui 
contenu dans la memoire M2. 

Une non concordance de ces deux donnees ICS conduit encore d 
une anomalie 82 qui pcut intcrrompre le processus de paiement.- Dans 
le cas contraire, les moyens de traitemcnt-systime comparent 
I'infomrjarion de gain du comptcur de gain 50 k une valcur dc gitin 
predSicrminie GS. 5i le gain est supdricur h cette valeur GS. Ics 
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moyens de traitemcnt-sysiimc vdrifitnt ators si I'authentifiaTit du 
boltjcr conceni6 , c'est h dirt son numdro de.s£rie, ne s.c situc pas dcjS. 
dans la Hste d'authenrifjanis dcs boiticrs g-ignants et ddji payds. Si tel 
6ta5t Ic cas, il y aurait encore unc anomalic 85 inicrrompant le 
processus de paiement. Si la station 12 n'cst pas reli6c aux moyens de 
stockage 23 de cetce liste, Ic joucur csi pri6 alois de se rendrc auprcs 
d'unc stadon relife ^ cettc listc. Bicn enicndu, le joueur pent £tra prii£ 
de changer de station Juste apris la verification visoelle 71. 

Dans Ic cas oii, soit le gain est infdrieur i la valcur GS, soit le 
gain est supdrieur h. la vaJcur GS ci le boitier ne se sime pas dans la 
Jistc gagnante, les moyens dc traitcment-systeme £mcncnt alors (£tape 
86) unc information de dcmandc -de paiement IDP accompagnfe d"un 
mot binaire aI£atoire MBA. A la rdceprioa 87 dc I'infonnation IDP et 
du mot binaire MBA, par Tintcrface d'cntr<£c-sortie du boitier. les 
moyer* dc ciyp-Zi,- vM, 45. 46, 47) du baTdcr roni aptcs h. g^nfrer une 
premiare valcur de gain cryptfc VFl k partir de I'informaiion dc gain 
contenuc daiu; le compieur de gain 50 et de la premi&re donndc 
auxiliaire ICl contenue dans la uifmoire Ml ((Stapes 88-92). 

Pour ceia, le gdndrateur pscudo-aldatoire dc cryptage de gain 46 
est apic a etra inidalisd par uoe valcur initialc et k fonctionncr jusqu'i 
la rfiception d^me indication d'arrfit. La prcmiire valcur de gain 
cryptie VFl est alors la valcur daivit£e par le g£n6ratcur pseudo- 
alfetoire de cryptage dc gain 46 a la rdception de cette indication 
d'airet. 

Le premier circuit logique 47 re9cit conime variable d*entr£e 
rinformation de gain contenuc dans le compteur de gain 50 ct une 
name d- ]z prcnuirc donnde auxiliain. ICi stockce dans la mdrooijc 
ML Ce premier , circuit 47 applique alors unc premiere fonction 
logiquc pi€d6tcrmin6c. par cxcmplc k base de OU exclusif, k ces deux 
variables d'entrfc et dglivre une premiere valeur de sortie 
conespondante. qui ddfinie la valeur initials du gdndratcur pseudo- 
alfiatoire de cryptage de gain 46. 

Lc compteur auxiliaire 45 est apte a compter ou dccompter depiiis 
«ne valeur initiale-compteur jusqu'a unc valeur finale-compteur. 
Lindication darret du fonctionncment du gdndrateur pseudo-aldatoire 
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de cryptagc de gain est alors ddlivrfi par le comptetir auxiliaire 45 
lorsquc ladite valcur flnalc-compteur est ancinte. 

Lc dcuxiftme circuit logique 44 est utilise ici pour d(5finir la 
valeur i n iti ale compieur ou la valcur finale comptcur scion que lc 
compuur compte ou.d£compte. 

Ce dcuxifenic circuit logiquc le^oit commc variables d'entrtfe le 
mot binairc pseudo-a]i£atoLre MBA ct unc dcuxiame paitic dc la 
premiere doxmfc auxiliairc stockie ICI. Une deuxi&me fonction 
logique pr£d6tennir)£c, de pr<f6rcnce diffdrcnic dc la praniirc, est 
alors appb'qu£c k ces deux variables d'cntrfe ct le deuriime circuit 
logique 44, dilivrc une deuxicmc valcur de sortie qui difinit la valpur 
initiale-coinpteur ou la valcur finale-compieur. 

Aiusi, le comptcur polynominal (par exemple) 46 est initiaiis6 h 
une valeur initiale dependant du contenu ciyptd dc la mfmoire Ml ct 
de rinfonnaijoa de gain contenue dans le comptcur dc gain 50. Cc 
compteur fonctioimcra alors jusqu'i cc que le compteur auxiliaire 45 
s'arrete, lc nombre d'ittfrations dc cc dtmicr <£tant dffini de fa^on 
pscudo-al<£atoire h I'aidc du mot binaiic MBA. Lors dc Tarrct du 
comptcur 46, son conicnu. ddfinissant la premiere valeur de gain 
cryptic VF1» est d£Uvr6 aux moycas de traitcment-systimc dc la 
station par rintcmiddiairc du registre d'cntrfc-sortift 39 6tapcs 93, 94). 

L« paiement effecdf du gain au joueur ne sera (^ectu£ que si 
cctic prcmiire valcur de gain cryptic VFl dilivrfe par lc boiticr, esit 
identique h une deuxiinie valcur dc gain ciypi6e VF2 £tablic par les 
moyens, dc crypiage-systimc 19 de la stanon. A cet effet, les premiers 
moyens de cryptage auxiliairc 20a dc la stadon recalculcnt la premiere 
domi6c auxiliairc cryptic ICl k paitiT du numiro dc siiie du boatier ct 
dc la clef secrfetc corrcspondanie. Ce numiro dc s6ric pent ctrc stock6 
dans la mf moire Ml oO bien lu optiqucmcnt par un Icctcur optique. A 
partir de ]h, les moyens de cryptage-systSroe, comportant des moyens 
analogues k ccux dcs moyens dc ciyptage-boMer (c'est k dire dcs 
circuits ]ogiques ct des comptcurs analogues aux circuites logiqucs 44, 
47 ct aux compicurs 45 ct 46), calculent la deuxiime valeur de gain 
ciyptfe, dune fa^on analogue k celle utilisie pour lc calcul de la 
premiere valeur dc gain ciypidc VFl, h partir de rinformation ICl 
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xecalculfe par les pTCmicTS njoyens de cryptage_auxiliaires, et du mot 
binaire pseud o-al6atom, MBA qui est connu dc- la station puisque 
gdn^nS par Ics moycns dc g&dration pseudo-al6atoire-systiinc 22, 

En cas dc non concordance il y a dc nouveau anomalic 
interrompant Ic processus dc paiemcnt. Par contrc, en cas de 
concordance, le paiemcnt 99 du gain est effcctnf au joucnr, Ic boMcr 
est vciTOuillf (6tapc 101), le comptc\ir 49 est charg^ par unc 
information representative d'un paiemcnt cffccru6 au joucnr et un 
arcMvagc du numfro dc s£rie dc cc boiticr gagnant est cifccnuS (<£tapc. 
100) soit au niveau dc la station eDc-m£mc soit au niveau dcs moycns 
de stockage 23 notammcni s'il s'agit d'un gain supfricur h la valcur 
GS. 

Lc conditionncmcnt du paiemcnt cffcctif du gain au joueur par la 
concordance des deux valcnrs dc gain cryptfcs VFI ct VF2 garantit 
icr^anisme ^.^^^ur cci:trc la fraudc provenant notamment dc boiticrs 
falsifies contcnant des micro-procccscurs programmis pour simuler 
dcs valcurs feciiccs d mfomiation de gain. 

Bien que Ics autics 6iapcs dc vdrificaiion (dcmande de stamt, 
v^rificatioa dcs donn£es IC2 ct IC3) re soicnt pas indispeasables» 
eUes contribuent avantageuscmcnt k angmcnicr la sdcuritf contrc la 
fraude. Far aillcurs, lliommc du mtfticr aura compiis que scul lc 
contcnu dcs compcems 48, 49 ct 50 fait foi vis-S-vis de I'organisme 
paycur, I'affichagc do Icur contcnu sur I'tfcran 14 ou 28 n'ftant quhmc 
indication visuelle, Aussi. toujours dans lc but d'augmcntcr la 
sficurit^, if est avantageuscmcnt pr«£vu que lc compieur dc gain 50 soit 
agcnc6 potur conicnir succcssivcment dcs mots binaircs dc gain 
pr£d€temiin6s rcprfscniatifs dcs informations de gain successives que 
pounait obtcnir le joueur s'il gagnaii succcssivcment h chaque cssaS. 
Chaque mot binaire difftrc albrs du mot pn£c<£dent ct du mot suivant 
dans la lists par au moins deux bits. Unc teUc precaution complcxifie 
encore la tache d'un fraudeur qui souhaitcrait modifier le contcnu du 
compteur dc gain car il aurait k modifier deux bits k la fois et noh un. 

La memc pr6caurion peut ctre avantageuscmcnt utilisfe pour le 
compteur d'£iat 48 avcc unc dcuxieme liste prfdfitemiinfe de mots 
binaires differant Ics uns des autres pax au moins deux bits, Ceci 
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aK)orte en plus unc double s£cmii6 pour vdrifi- le niveau de gain 
obtenu ct Y6m perdu ou gagnant du jeu k chaquc essai"! 

Enfin. a est possibli qu'un joueur desire achetcr ua boitier k une 
tierce personne pour continuer le jcu. Dans ce cas, il est 
paiticulifereincnt avaDiagcux que racheteur puisse verifier le contenu 
du compteur dc gain notamment Aussi, en presence d\mc demande de 
v€rificatioii dinfomiarion de gain dmanent du joueur acheteur. les 
moyens de traiictnent-systime sont apte^t k lire ies contenm des 
compteurs dc d'dtat et de paiement ct k communiqucr les 

rdsultats de ccttc lecture sur r&ian 14 de I'interface de dialogue. Bien 
entcndu. dans ce cas. rinfoimaiion de demande de paiement IDP n'est 
pas ddlivrde au boI Jcr. 
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REVENDICATIONS 

1. Dispositif flectrooiqtEe de jeii de basard, comprcnant 
a) un boTticr portable (11) compTcnant 

- unc mtcifacc-boiticr d'cntrdc/sortie (39, 29, 30) aptc ^ recevoir 
UDC infonnation prfdftermiitfc d'autoiisation de jeu sans laqueQe le 
bolder est inapte au jeu, 

- uue iniciface de communication (24, 25, 26, 27, 28) avec le 
joucur, 

- des moyens de mfmoire (Ml. M2, 53-1,... 53-10, 48, 49, 50) 
aptes ^ stocker au moins une donnde de r£f£Tence, 

- des moyens de tiaiteineiit-boider, comportant 

- des moyens de comparaisott (55) aptes ^ comparer ladite donn€e 
de rff<£rcncc avec une donndc de jeu introduite par le joucur par 
Finterfbcc de ccsr:;. .-.Icaiion- Vunt de ccf deux donn£es £tant une 
valeur gintfrfc dc fa9on al(£atoirc. 

. des moyens (50) aptes i ftablir une infoimalion dc gain 
dependant au moins du xfoultat de laditc compaiaison, ct k stocker 
ccoc infomiation de gain dam Jcs moyens de mdmoiic (50), ct 

. des moyens dc cryptagc-boMer (44-47), aptes en x€ponse 4 
.une inforaiatioa pT£d£temiin£e de demande de paiement CII>P) le^ue 
par rintcrface-boiticr d'entrfc/sorric, k tftablir une prcmiirc valeiir de 
gain ciyptfe (VFl) k partir de laditc information de gain ct h ddlivrer 
■cette prexniire valeur crypi«£c h rintcrface-boiticr, ct 

b) un systcpie de conirSle (12), extcme ss boiticr (11), 
comprcnant 

- une intcrfecc-systimc d'cntnSc/sortic (17) sptc k coop<£ier avec 
rinieifacc boiticr d'cntr£e/soitic, ct 

- des moyens de traitemcnt-systimc (16), aptes, 

. en prfsencc d*une demande dc paiement dmanant du joucur. 
k lire laditc infomiataoa de gain conicnue dans les moyens de m€mom 
du bolder ct k ddlivrcr laditc infonmation dc demande de paiement 
(IDP) a I'interfece-systeme d'cou-6c/soiTie. ct comportanc 

. des moyens dc ciyptagc-sysi£mc (19), homologues des 
moyens de cryptage-boider. aplcs k iiablir unc deuxieme valeur dc 
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gain ciyptfe (VF2) a partir dc ladiie infomiation dc gain lue, ainsi 
que des moyens dc comparaJson aptcs k comparer ]es deiix valeurs de 
gain ciypi&s, 

le paicmcnt effccdf du gain au joucur ftant conditionn6 moins 
par la concordance des deux valeurs dc gain crypt&s. 

2. Dispositif scion 3a rcvendication 1 caxact£iis6 par le fait que Ics 
moyens de craitenoent-systimc sent aptes h txansmeme ladite 
information prtfdftcmunAs d'aulorisadon dc jcu (DV). 

3. Dispositif scion la rcvendication 1 ou 2, caiactiSrisi par le fait 
que Ics moyens de traitcmcnt-bolricr comportcnt des premiers moyens 
de gtfniration alfaioirc (53-1,... 53-10) aptes a gfeirer al<£atoircmcnt 
ladite donnfis de nSf^xcncc paimi un ensemble pr6d€tennin6 dc valcms, 
tandis que I'intcrfacc de communication comporte des moyens 
d'introduction de donn<£cs (25-27) pcmjcttant au joueur dc choisir sa 
donnf c de jcu pamti le mfimc ensemble prdditennintf de valeuis. 

4. Dispositif selon la rcvendication 3. caiactiSrisd par le fait que 
les- premiers moyens dc gtfntf ration aldaioirc comportcnt au mcins iin 
ccmptcur dc jcu (53-1^.. 53-10) foncdonnant depuis mx instant initial 
pr£c^ant la rdception dc ladite imormarion pr€d£temnn6e 
d'aiiMrisation dc jcu (pvy, cc compicur £tant susceptible d'etre stopp6 
h. la rtfccption dVme infonnation d'airfit choisie (DV) ct de mfmoriser 
la valcur qu'fl prfsenie lors de son arret dc fonctionncment. cette 
valcur d'arrct d^fonissant, ladite donn£e de rtfKrcncc. 

5. Dispositif scion la rcvendication 4, caract6ris6 par le fait . que 
I'information d'arrct est ladile information d'autorisation de jcu (DV). 

6. Dispositif scion la rcvendication 1 ou 2, caiact(£ris(£ par Ic fait 
que les moyens de traitcmcDt-boIder comportcnt des dcuxncmes 
moyens de g6j<5iation aWatoire (53), comroandds par Taction du joucur 

ct aptes & dflivrer aldatoircmeni ladite dcmn6e de jcu, la donnfc dc 
r£f<£rcncc tftant une donnfe pnJddtcmiinfc stock€e dans les moyens de 
mfmoirc. 

7. Dispositif scion I'une des revcndications prfc<£dentes, 
caraci£ris6 par le fait que Ics moyens dc m£moiic (Ml) sont aptes k 
stocker une premiire donntfc auxijiaire prtfddtermintfe, aCl). 

ct par le fait que Ics rnoycns dc ciyptagc-boitier (44-47) sont aptes h 
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gfinirer la premiSre valcur de gain cryptic (VFl) h partir dc laditc 
information de gain et dc ladiie prcmiirt doimdc auxiliairc (ICl). 

8. Disposidf selon la rcvendication 7, caract£ns6 par le fait que 
la premiere doimdc auxUiairc est obtcnuc a paitir d'un prciraer 
cryptage avodliaiic d'au moins unc pictniSrc information (NS) 
sp£cL5que au boiticr, ct est priiscnte dans les moycns dc mfmoiic (Ml) 
avant Ja rfcepdon de rinfonnation. d'autorisation de jeu (DV). 

9. Disposinf seloa la revcndicanon 7 ou 8, caiacttfiisd par Ic fait 
que les raoyens dc cryptage-boiticr comportcnt: 

- un gdndiateur pseudo-aldatoirc dc ciyptage dc gain (46) apic ^ gtie 
initiaJisf par une valeur initialc ct k fonctionner jusqu'^ Ja y&eptioii 
d'une indication d'arrct, la prcmiiie valeur de gain ciypKSe (VFl) €iaiit 
aloTS la valeur dfUvr^e par Ic gdniSratcur pscudo-aldatoira de cryptage 
de gain k la rfrepdon dc laditc indicaticai d'arrct. 

- m» premier circuit logiquc (47) apte h rccevoir comrae variables 
d-cntrfe ladiic snfonnarion de gain et unc paitie au moins dc la 
premiere donndc anxiliaire stock6e aCl). k appliqucr une picmicic 
fonction logiquc prfdacnninfe h ccs deux variables d'entn£e et k 
dflivrcr une premiirc valeur de soitie correspondante. dfifinissant 
ladite valeur iniriale du g<£n£rateur pscudo-ajfatoiie dc cryptage de 
gain, et 

~ ^ compteur auxiliairc (45) apte h compter ou dicomptcr dcpuis une 
valeur inidale-comptcur jusqu'a une valeur finalc-compteur. ladite 
indication d'anct du fonciionnement du gin<£rateur pscudo-al£atoire de 
ciyptage db gain (46) dtant di2ivn£c par le compieur auxiliairc lorsquc 
ladite valeur finalc-comptcur est atteintc. 

10. Dispositif scion la rcvendication 9, caract£ris€ par le fait que 
les moycns de cryptage-boiticr comprenncnt un second circuit logiquc 
(44) apte i rccevoir comme variable d'entrfe un mot binalre pseudo- 
al&toire (MBA) et une deuxiime partie au moins de la prcmiire 
domi6e auxiEalre stockde aci). k appbquer une deuxiime fonction 
log^que pp£d£temiinee k ces deux variables d'enticc ct k ddlivrcr une 
deuxieme valeur de sortie coirespondante. ddfinissant ladite valeur 
imnalc compteur ou ladite valeur. finaJc compieur. 

11. Dispositif scion rune dcs revendications 7 a 9. caractdrisd -ar 
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Ic fait que les moyens dc traitcrncnt-syst?,ine comportent des moyens 
de g(£ni£ration pstudo-aliatoire-syst&mc (22) aptes 5 g^n^rer ledit mot 
binaire pseudo-ajfatoiic, ce mot binairc pseudo-a3£atoirc 
accompagnant ladite information dc dcmande dc paicment (IDP)- 

12. Dispositif scion la rcvcndication 11 piise en combiuaison avec 
la icvcndicarion 8, caract<£ris6 par le fait que les moyens de 
traitcment-systinjc compoitent des premiers moyens de cryptage 
auxiHaircs (20a) apics 21 effcctuer ledit premier ciyptagc auxiliaire dc 
ladite premiire infoiroation sp^cifique (NS) pour rccalcialer la valcur 
de la premiere donnie auxHiairc aCl), par Ic fait que les moyens dc 
cryptage-systimc component des moyens analogues h ceux des moyens 
de cryptage-boltier 

et par le fait que les moyens de cryptage- systfcmc sont aptes 
ditemiincT la dcuxiftme valcur de gain ciyptfe CVP2) k paitir de la 
valcur de la prcmiftrc donn^c auxiliaire iccalcuMe (ICl) et qu mot 
binaire pseudo-aHatoiic (MBA). 

13. Disponrif scion Ihme des revcndicaticHis prfcidcntcs, 
caracwJiis6 par Ic fail que les moyens dc mimoiic spm aptes a stocJcer 
unc detraimc donnfc auxiliaire prx£d<£termin6e aC3). ci par le fait 
qu'cn prdscnce dc la demands de paicment imanant du joueur, les 
moyens dc traiiaoicnt-systime sont aptes a cffccrucr un traitemcnt de 
verification (81) dc la valcur de cette dcuxiims donndc auxiliaire, 
avant dc dflivxer ladite information de demande de paicment au 
boitier, 

14. Dispositif scion la rcvcndication 13. caract£ris6 par le fait que 
les moyens dc traitcmcnt-systimc comportcnt des deuxiSmcs moyens 
de cryptage auxiliaircs .(20b) aptes a cffectucr un deuxicme cryptage 
auxiliaire d'unc dcuxiimc information spdcifiquc au systtmc dc 
contrSle, pour dftcrmincr la dcuxiftmc donndc auxiliaire <JC3} au plus 
tard h la fdccpiion dc ladite infcrniarion d'autorisation de jeu. par le 
bolder, 

par le fail que les moyens de traitcmcnt-sysiimc sont aptes a 
stocker ladite dcuxiime information sp<Scifique ct la deuxieme donnfe 
auxiliaire (1C3) dans les moyens dc memoirc (M2), 

par Ic fait cuz Ics dcuxicmcs moyens de crypiegc auxiliaires sont 
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aptes a lire la dtuxieme information spdcifiquc ct. la deuxi&me donnic 
auxiHaire dans les moycas de mimoiic du boiticr, et ^ comparer la 
valeur de la deuxieme donntfe auxilia-'ie lue avec celle recalculfie par 
les dcuxifemes moyeos dc cryptagc auxiliaires k pardr de la deird&mc 
infonnarion spicifique lue. 

15. Dispositif scion rune des revendicatiom pr£c£dentes 
caract£ris6 par le fait qus les moycns de mfimoira sont aptes h stocker, 
avant la r&epiion de ladiie ixifoniiation d'autorisataon de jeu, une 
doninJc d'authendfication du boMer (IC2), 

et par Ic fait que la rdception de laditc information d'autorisation 
dc jeu est conditionctfe k la verification dc cettc donn«£e 
d'authentification. 

16. Dispositif selon la revcndication 15, caractdrisg par Ic fait que 
la doimde d'auihentificaiion rfsulte d'un cryptagc d'authentificarion 
du--- troisici^. Uifcrzrisdoa spdcifique an boTrier (NS). 

par le fait que les moycns de traitetnent-syslfeine comportent des 
rooycm de cryptage d'autheniification (21) aptes h rccalculer la 
donnic d'autbentificarion (LCI) k partir de la iroisifiroc infonnadon 
spdcifiquc pour vfrificr la valcur dc cettc troisi&nje infonnadon 
spfciiique lue dans les moycns de mtfmoirc (M2). 

17. Dispositif selon I'unc des rcvcndications 8 k 16. caract£iis« 
par le fait que le premier ct dcuxiimc cryptage auxiHairc ainsi que le ' 
ciyptage d'authentification component des algorithmcs de cryptage k 
cl6, ct par le fait que la deuxiime donn& aujdliaire et la donnfe 
d'authentitfcation sont des ccmficais crypics des dcuxiemc ct 
troisiimc informations sptfciiiques. 

IS. Dispositif scion rune des rcvcndications 8 k 17, caract6ris6 
par Ic fait que les prcmiSie ct troisiftmc infonnaiions spicifiqucs 
component un authcntifia.it spdcifique au boiticr tel que le numfro de 
s£ne du bojrier. ct par le fait que les moyeus de teutement-systime 
component des moycns de lecture du numdro de s^rie. 

19. Dispositif selon I'une des rcvcndications pn£c<5den.es. 
caractfnsi par le fait que les moycns de mtfmoire component deux 
m^moircs (Ml. M2X Tunc d'entre eUcs contcnant la prcmi£rc donndc 
auxiiiau-e. rau.Te contcnant dabord la domife d'authentification QC2) 
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puis, apres verification de cetie dcmifere, la detixiime donnfc 
auxiJiairc CIC3). ^ 

20. Disposiuf scion Tunc des revendicatioDS pr6c£dcntcs, 
caractdrisd par Ic fait que Ics moyens dc mdmoirc component xm. 
compteur d'€tzt (48) apic k contenir une infoimaiion d'^iat 
reprfseniative du rfsultat du Jcu, ainsi quW compteur dc paicment 
(49) ap:e ^ contenir unc information de paicment. representative d'lm 
paiemeni d6ja effectu6 ou non encore efzectu6 au joueur, 

par le fait, qu'cn prdscncc de la dcmande dc paicment ^manant du 
joueur, les moyens de traitement-syst&nie sont aptes ^ lire en outre les 
contends des compicurs d'diai ct de paicment avant de ddlivrer laditc 
information de dcmande dc paicment au boTticr. 

21. Dispositif scion I'une des revendications prficedentes. 
caracierisd par le fait qn'il comporte des moyens d'aJimentation (35, 
36) autorisant Ic fonctionnenient de certains sa moins des — *oyens da 
bolder avant la rdceprion de rinfonoatioa d'autorisadon dc jeu. 

22. Dispositif scion I'line des rcvendicatiQiis pr£c£deritcs, 
caxactfris^ par le fait que Ic boitier est inapte au jeu ^ la suite d'unc 
comparaison cntrc une donnfe de r£f€rence et une donndc dc jeu 
representative d'un jcu pcrdant et/ou apris un paicment effcctif au 
joueur. 

23. Dispositif scion Tunc des - revendications prdcedentes, 
caracieris6 par le fait que rintcrface dc communication comporte des 
moyens (2S) de rcssfjtion au joueur d'unc information de rfisultat 
reprfseniative du r^sultat dc la comparaison entre les donnees de jcu 
et dc reference, Jui indiquant s'il a perdu ou gagne. 

24. Dispositif scion Tune des revcndication pr£cedcnie, 
caiacteiise par Ic fait que les moyens de memoire sont aptes k stocker 
une pluralitd dc donndcs de reference, ct 

par le fait qu'unc pluralite de donnees de jcu sont susceptiblcs 
d'etre' introduites par Ic joueur, 

25. Dispositif seJon la revcndication 24, caracierise par Ic fait que 
les donnees de jeu sont introdtiiit:s successivement, chaque donnee dc 
jcu introduite etani comparee a une dpnnee de reference 
prddtierminec. 
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et par Ic fait qu'unc donnfc de jcu nc peut etrc introduite par 
rintcrface de commmication qu'cn cas d'linc concordance entre la 
dorm6e .de jcu prfcidcmmcnt incrcduitc ct la donn6; dc r£f£n;iicc 
correspODdante, 

et par le fair qu'k chaquc concordance correspond une infoimation 
de gain difffrcnte (NGl,... NGIO). 

. 26. Dispositif scloa Ics rcvendications 23 et 25, caraci^ris6 par le 
fait que I'infomiaiion de rtfsuJtat compone raffichage d'une 
infonnatioii dc niveau de gain correspondant k I'infonnaiion de gain^ 
contcnuc dans les moycns de mtfmoire. 

27. Dispositif scion Tunc dcs revendications 24 it 26, caracti£ris<£ 
pax ]c fait que les moycns de mtfmoiie compoitcnt nn comptcur de gain 
(50) apxe h contenir successivement dcs mots binaircs de gain 
pr£d£tennin6s rcprdsentatifs dcs infoimarions de gain snccessivcs. 
cheque mot . ..sire difftSrant du mot stuv.?nt et du mot pr£c<£dent par 
au moios deux bits. 

28. Dispositif selon Tune dcs revendir:ations. 24 k 27, prise cn 
combinaison avcc la rcvcndicatioa 20. caract^risd par Ic fait que le 
comptcur d'dtat (43) est apte k contenir successivement dcs mots 
binaircs d'<£tat prfdtftcnnintfs xcpnSscnradfs des informatiOTS d'<£tat 
succcssives. chaque mot binaiie d'6m diffirant du mot suivant et du 
mot pr£c6dcnt par au moins deux bits. 

29. Dispositif scion rune dcs rcvendicadons prtfc£demes prise en 
combinaison avcc les revendications 4 « 24. caraa6iis<£ par le fait que 
ICS premiers moycns de gtfn^raiion aliatoire component une plurality 
de comptcurs de jcu (53-I,.„ 53-10). chaque comprcur £mnt 
^.usccpaale dc contenir une donnfe de r6f6rcnce et est associd ^ une 
introduction de donndc de jcu par ie joucur. 

30. Dispositif scion la rcvcndication 29. caract£ris6 par le fait que 
la nSccpnon dc ladite information d'autorisarion dc jcu (DV) s.oppc le 
^onct^omicmem des compteuis. la plurality de dom.6es de rffdrcnce 
€tant alors la pluraliti de valenrs qu'avaicnt les comptcurs i la 
r«£ception de ccrte infonnation d'autorisation dc jeu. 

31. Dispositif scion Fune dcs revendications 1 a 28 prise en 
combinaason avcc les revendications 4 ct 25. caraci<£ris<£ par le fait que 
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le compteur est associ<£ k tomes les introducricns successives dcs 
donii£es dc jcu par Ic joueur. et par le fait que rintroducdon d'une 
donade dc jeu par Ic joueur fige le compteur correspondant & une 
valeur ddfimssam la valcur dc T6f(£rcncc associde a cetie donnde dc 

32. Disposiiif scion l^me dcs levendications pi^c^dentes, 
caract(£ris6 par Ic fait que le systfemc dc controlc comportc unc 
interface dc dialogue (14, 15) apic ^ reccvoir laditc dcmande dc 
paicment tfmanant du joueur. 

33. Disposidf seloa la revendicatioa 32, caractdrisfi par Ic fait 
qu'cn prfsencc d'unc demandc dc vdrification d'infoixnation dc gain 
dmanant du joueur, Ics moyens dc traitemcnt-systfemc sont aptcs i lire 
les contCDUs des compteurs do gain, d'itat, et de paienicnt et 2t 
communiqucr les r£suliats de cettc lecture sur I'intcrface de dialogue. 

34. Dispositif scion l-unc dcs reveadscarfoas prfciSdentes. 
caract6ris(£ par le fait qu'cn prfsencs d'une demande de paieaient 
fmanant du joueur, les moyens dc traitcment-systSxne sost sptes h 
transmertre S I'inicrfacc-systime d'entrfe/sortic unc demande dc statut 
(STl) en rfponse k laqueUe Its moyens de traitement-boiricr ddUvicnt 
laditc infonnadon dc gain k I'interface-boidcr d'entnSc/sortic. 

35. Disposidf scion IVme dcs revendications pricfdcntes, 
car2ct£ris6 par le fait que Ic systeme de controlc comportc au moins 
une station, telle qu'un terniinal. * 

36. Disposidf SK^rm les revendications 14 et 35, caract£ris6 par le 
faifque la deuxiime information spfcifique coriiporte le num<£ro de 
sine dc la station, la date de la vcnte du boMer au joueur et le nuni£ro 
d'ordre dc cctte vcnte ^ cene date. 

37. Dispositif selon la revendicanon 35 ou 36. caiactcrisfi par le 
fait que le systimc dc controlc comportc une plurality de stations de. 
scnjcturt analogue, Jes informations d'autorisation de jcu et de 
demande de paicment pouvant cm; dflivrdes par la memc station ou 
par deux stations diffiicntes. 

38. Dispositif selon I'une des revendications 35 i 37, caractSrisd 
par Jc fait que chzquc boilicr possede un auihcntifiant unique, par Ic 
fait que le sysiimc de controlc comportc des moyers dc stockage (23) 
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d'une listc d'authentifiants des bolders gagnants et payfis, 
par le fait qu'en prfsence o'uzie demands de paiement fmanant du 
joueur e; correspoDdant k un gain sup^rleur ^ une valetir djs gain 
pr^ddteimin^c, Ics moycns de traitemcDt-syst&cae sont apies k v&ifier 
si rauthentifiant du boider conccmi se situc dfji t^ang ladite Hste. 

39. Dispositif scion Ihinc des rcvendicaiions prfc<Jdentcs, 
CEiBct£ri56 par Ic fait que Ic boiticr comportc un circuit int^gr^ cabld 
(37) incoiporant Ics moycns dc traiiement-bpjticr ci les moyens de 
mdmoire du boitier. 

40. Boiticr appanenanl au dispositif selon Ihinc dcs revendications 

41. Sysiime de contrSIe appa^enant au dispositif selon l\2ne des 
revendications 1 h. 39. 
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Electronic system implementing a game of chance. 

The present invention relates to an electronic system 
implementing a game of chance. 

Currently, there are various known games of chance allowing a 
player to win money after paying a starting wager. Thus, for 
example, in the "loto'» /lottery/ game (registered trademark), the . 
player marks a series of numbers on a ticket which must be 
validated with a specialized agency, paying a price corresponding 
to the starting wager. Subsequently, a supervised drawing of lots 
takes place at a chosen venue, and the players holding a winning 
ticket may withdraw their gain from a payor entity. 

Compared to these classic games, which require the use of 
paper and drawings of lots on predetermined dates, valid for all ' 
players, the invention provides a radically different concept of a 
system implementing a game of chance. 

It is an object of the invention to provide an autonomous, 
portable unit allowing a player to make one or several wagers, the 
success or failure of which determine a score, or gain level, 
according to predetermined game rules. Said unit also constitutes 
the transaction element for the payment of the winnings, and 
comprises all the elements necessary for the verification of such 
winnings. In addition to this portable, stand-alone unit, there is 
a control system, outside the unit, which allows the payor entity 
to make necessary, verifications before paying off the winnings. 

Another object of the" invention is to provide, inside the 
electronic unit itself, the drawing of the reference data to which 
the game data chosen by the player are compared. A further object 
of the invention is to allow simulation of one or several castings 
of dice, performing, inside the unit itself, a drawing of the game 
data, which are then compared to the predetermined reference data. 

A very important consideration, inherent to such a gaming 
device, is the fight against fraud. In this regard, another object 
°^ invention is to provide several securing and verification 
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levels, referring both to the origin of the portable unit and to 
the content of its information concerning, on the one hand, the 
"lose" or "win" aspects of the game, and, on the other hand, the 
value of the gain accumulated by the player, which may be quite 
significant. 

Therefore, the invention provides an electronic system for 
implementing a game of chance, comprising: 

a) a portable unit, comprising 

an input/ output unit interface that can receive 
predetermined information authorizing the game, without which the 
unit cannot be used to play, 

- a communication interface with the player, ' 

- memory circuits capable of storing at least one set of 
reference data, 

- unit processor, comprising: 

■ comparison media, which compare said reference data to the 
game data introduced by the player through . the communication 
interface, whereby one of these two sets of data is a randomly 
generated value, 

media which can establish gain information, depending at 
least on the result of said comparison, and store this 
gain information in the memory, and 

unit encryption media, which, in response to a 
predetermined payment request received by the 
input/output unit interface, establish a first encrypted 
gpin value based on said gain information, and deliver 
such first encrypted value to the unit interface, and 
b) a control system, external to the unit, comprising 

- an input/output system interface, which communicates with 
the input/output unit interface, and 

- system processors, which, 

. in the presence of a payment request from the player, 
read said gain information contained in the memory of the unit, and 
deliver said payment request information to the input/output system 
interface, and which include 
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. system encryption media, analog to the unit encryption 
media, which establish a second encrypted gain value based on said 
gain information being read, as well as comparison media that 
compare the two encryjjted gain values; the actual payment of the 
winnings to the player is then subject at least to the matching of 
the two encrypted gain values. 

Professionals know that the term "random" associated here to 
the generation of reference data or game data, is generally a 
mathematical concept, and that, in a practical embodiment of 
"random" generation, such generation is pseudo or quasi random, 
even though it is practically impossible to predict the data being 
generated. However, the term "random" is used here to reflect the 
practical impossibility, for a third party, to predict the game 
data or the reference data. 

In one embodiment, system processors can transmit said 
predetermined game authorization information. On the other hand, in 
order to read gain information, in the presence of a payment 
request from the player, system processors can transmit a status 
request to the input/output system interface, in response to which 
unit processors deliver said gain information to the input/output 
unit interface. 

In one embodiment, unit processors have a first set of random 
generators that can randomly generate said reference data from a 
predetermined series of values, while the communication interface 
has data entry media, allowing the player to choose his game data 
from the same predetermined series of values. 

In order to assure the random drawing of the reference data, 
the first set of random generators conveniently include a game 
counter that operates from the start, prior to receiving said 
predetermined game authorization information; such counter can be 
stopped when a. selected stop information is received; and can 
memorize the value it showed when stopped; this stop value 
determines said reference data. 

The stop information preferably consists of said game 
authorization inform ation. ' 
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In a variation, it is possible to design a game in which 
reference data are, for example, constants established in the rules 
of the game, the game data being randomly chosen by the player, in 
the way dice are cast. In such a variation, unit processors may 
include a secondary set of random generators, controlled by the 
action of the player, which can randomly deliver said game data, 
, whereby the reference data are predetermined data stored in the 
memory. 

To enhance security in the verification of the garae 
information, the memory can store a first predetermined ancillary 
set of data, and the unit encryption media can generate the first 
encrypted gain value based on said gain information and said first 
set of ancillary data. 

The first set of ancillary data is conveniently obtained based 
on a first ancillary encryption of at least a first set of 
information specific to the unit, such as its serial number, and is 
present in the memory before the receipt of the game authorization 
information. 

In one embodiment, unit encryption media include: 
- a pseudo-random gain encryption generator, which can be 
initialized at an initial value, and operate until it receives a 
stop command, in which case the first gain value is the value 
delivered by the pseudo-random gain encryption generator, upon 
receiving said stop command, 

- a first logical circuit which can receive, as input 
variables, vsaid gain information and at least part of the first 
ancillary data stored, apply a first logical predetermined function 
to these two input variables, and deliver a first corresponding 
output value, defining said initial value of the pseudo-random gain 
encryption generator, and 

- an ancillary counter, which can count up or down, from an 
initial counter value to a final counter value; said cominand to 
stop the operation of the pseudo-random gain encryption generator 
is then delivered by the ancillary counter, when said final counter 
value is reach ed. 
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Unit encryption media also preferably include a second logical 
circuit that can receive as input variables a pseudo-random binary 
word, and st least a second part of the first ancillary data 
stored, apply a second logical predetermined function to these two 
input variables, and deliver a second corresponding output value, 
^ defining said initial counter value or said final counter value. 

The system processors conveniently include system pseudo- 
random encryption media that can generate said pseudo-random binary 
. word, which pseudo-random binary word accompanies said payment 
request information. 

To verify the first encrypted gain value, system processors 
have a first set of ancillary encryption media which can perform 
said first ancillary encryption of said first specific information, 
in order to recalculate the value of the first ancillary data,- on 
the other hand, system encryption media are analog to the unit 
encryption media, and can determine the second encrypted gain value 
based on the value of the first ancillary value recalculated, and 
on the pseudo-random binary word. This second encrypted gain value 
will then be compared to the first. 

To verify again before payment, the memory conveniently can 
store a second predetermined ancillary value, and, in the presence 
of the player's payment request, system processors can verify the 
value of this second ancillary value, before delivering said 
payment request information to the unit. This second ancillary 
value can be a certificate, through an encryption algorithm with 
secret or public code, consisting of an identification specific to 
the control system, such as the serial number of a sale terminal. 

To verify the origin of the unit, a convenient feature makes 
the memory capable of storing an identification of the unit, before 
receiving said game authorization information; the receipt of said 
game authorization information is then subject to the verification 
of this identification. 

This identification data can result from an authentication 
encryption of a third item of information specific to the unit; 
this can be a certification of the serial number of the unit. 
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Obtained from an encryption algorithm with secret or' public code, 
using a key other than that reserved for the second ancillary data. 

In this case, the system processors preferably contain 
authentication encryption media that can recalculate the 
"identification data based on the third specific information, in 
order to verify the value of this third specific information read 
in the memory. 

The serial number of the unit can be found in the memory of 
the unit. It can also be read by an appropriate reading device, 
such as an optical scanner, if the serial number appears in the 
form of a bar code on a label apposed on the unit. 

In one embodiment, the memory has two levels, one containing 
the first ancillary data, the other containing first the 
identification data and then, after verifying the latter, the 
second ancillary data. 

On the other hand, the memory can include a status counter 
that can contain status information representing the result of the 
game, as well as a payment counter that can contain payment 
information on a payment already made, or not yet made to the 
player. 

In the presence of a payment request from the player, system 
processors can read, in addition, the content of the payment status 
counters, before delivering said payment request information to the 
unit. 

The unit conveniently contains a power source, allowing the 
operation at least some of these media, such as game counters 
and memory circuits, before receiving game authorization 
information. 

The unit conveniently cannot play after a comparison between 
reference data and game data indicating a losing game and/or after 
an actual payment is made to the player. 

The communication interface preferably includes media to give 
the player result information concerning the result of the 
comparison between game data and reference data, indicating whether 



he lost or won. 
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In one embodiment of the invention, the memoTy can store 
several reference data, and several game data which can be entered 
by the player. 

These game data can be entered successively, each game datum 
entered being compared to a predetermined reference datum; a game 
datum cannot be entered by the communication interface unless the 
game data previously entered and the corresponding reference data 
match, whereby different gain information corresponds to each 
match. 

Result information then conveniently displays the gain level 
corresponding to the gain information contained in the memory. 

Memory circuits are preferably equipped with a gain counter 
that can successively contain predetermined binary gain words 
representing successive gain information, each binary word being 
different than the next and the preceding word by at least two 
bits. This allows having binary words sufficiently different 
between them, to properly differentiate the corresponding gain 
information, and especially to avoid errors caused, for example, by 
a mistaken reading or writing of a single bit. Equally, the status 
counter can conveniently contain successively predetermined status 
binary words representing successive status information, each 
binary word being different than the next and the preceding word by 
at least two bits. 

When several game data must be entered by the player, 
especially successively, the first random generator preferably 
includes several game counters, each of which can contain reference 
data associated to game data entered by the player. Then, the 
receipt of said game authorization information may be set to stop 
the operation of all counters; then the multiple reference data are 
the multiple values found in the counters when receiving such game 
authorization information. In other words, the reference data is 
drawn once and for all, before the player enters the game data. 
However, it can be set so that a drawing takes place for each game 
datum entered- in this case, a single counter can be associated to 
all successive entries of game data by the player; when the player 
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enters game data, the counter is frozen at a value' defining the 
reference value associated to such game data. 

The control system conveniently includes a dialogue interface 
with the player, which can receive a payment request. This dialogue 
interface can be used for other purposes as well. Thus, in the 
presence of a request for verification of gain infoifmation from the 
player, the system processors can read the content of the gain 
counters, status counters, and payment counters, and communicate 
the results of this reading on the dialogue interface. 

The control system can include at least one station, such as 
a terminal, and preferably several stations with analog structure, 
whereby game authorization and payment request information is 
delivered by the same station, or by two different stations. 

To make another verification, especially when the gain is 
significant, the control system conveniently includes storage of a 
list of identification data of the winning and paid units and, in 
the presence of a payment request from the player, for a gain 
exceeding the predetermined gain value, system processors can 
verify whether the identification of the unit concerned is already 
found in said list. 

Another object of the invention is a unit and a control system 
pertaining to such electronic device for a game of chance. 

Other advantages and characteristics of the invention will 
appear from the examination of . the detailed description of an 
embodiment, not limited thereto, and illustrated in drawings, as 
follows: T 

- figure 1 represents schematically a station and a unit 
according to the invention, 

- figure 2 illustrates a network of stations, 

- figures 3a, 3b, 3c represent in more detail the unit in 
figure 1, 

- figure 4 represents a display screen of the unit, 

- figures 5, 6 and 7 represent schematic synopses of the wired 
architecture of an ASIC component incorporated into the unit, and 

- figures 8, 9, lOa , 10b, lOc represent operating layouts of 
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the device, and how the game is activated. 

As illustrated in figure 1, the electronic gaining device has 
a portable unit 11 and a control system 12, external to the unit 
12, and including an input/output . system interface 17, including 
here two copper fields 17a and 17b that can communicate with the 
analog copper fields of an input/ output interface of the unit 11, 
in order to exchange data by capacitive coupling. 

In addition to this input/output interface 17, the control- 
system 12 includes system processors 16, connected to this 
interface 17, as well as to a dialogue interface 13, with a user 
such as the seller or payor agent. This dialogue interface has a 
display screen 14, as well as a keyboard 15, for example for 
entering commands. 

The system processors 16 are incorporated into an electronic 
card built around a micro-controller communicating "with the 
interface 17 through an input/ output register 88. As can be seen 
more in detail below, when the device is in operation, the system 
processors 16 have system encryption media 19, first and second 
ancillary encryption media 20 and 20b, authentication encryption 
media 21, as well as a system pseudo-random generator 22, that can 
generate a pseudo-random binary word whose meaning will be 
explained below. In reality, these various media are implemented 
logically in the micro-controller of the system processors. 

In figure 1, the system processors 16, the input/output system 
interface 17, and the dialogue interface 13, are materially grouped 
in a station, such as a terminal. For this purpose, one can use a 
classic microcomputer, such as, for example, an IBM PC. In this 
case, the dialogue interface 13 will have the screen and the 
keyboard of the microcomputer. Then, one can use an additional 
electronic card, that can be introduced into the microcomputer, 
incorporating the system processors, as well as an extension 
constituting the interface 17. 

Although, in general, the control system can be incorporated 
into a single station, it is planned to use a station network 12 
(figure 2), all with analog structure. At least some of these 
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Stations can be linked to storage units 23 that can store, as we 
will see more in detail below, a list of identifications of units 
having obtained a winning game, and having caused an actual payment 
to the player. 

The unit ii is sized, above all, so that it can be hand-held. 
On its front, (figure 3a), it has a key 24 which turns it on to 
activate at least some of its components, such as, .for example, the 
display screen 28. On the other hand, this example of embodiment 
contains three game keys 25, 2 6 and 27, bearing three figures (1, 
2 and 3) , representing three game data among which the player can 
choose . 

On the back, {figure 3c), there is a label on which there 
appears, for instance, in bar code, the serial number NS of the 
unit. Here, this serial number constitutes a unique identification, 
specific to the unit. 

Figure 3b schematically illustrates an internal view of the 
unit 11. It shows the electronic prints 21, 32, 33 and 34 of the 
keys 24, 25, 2 6 and 27. Two copper fields 29 and 30, which are part 
of an input/ output unit interface, can communicate with the two 
matching copper fields 17a and 17b of a station 12. Autonomous 
power sources 35 and 36, such as batteries, assure the autonomy of 
the portable unit and, as we will see below, permanently supply 
power to certain components of the unit. 

While the three game keys 25, 26, 27, and the display screen 
28 form a communication interface with the player, an essential 
element of „ the invention is here a specific integrated wired 
circuit (ASIC: Application Specific integrated Circuit) bearing 
reference 37, and; as we will see in more detail below, comprising 
the unit processors, as well as the memory circuits. This ASIC is 
linked by a connection network 3 8 to the game keys, power sources, 
as well as the display screen 28. Of course, instead of an ASIC 
component, a micro-controller could have been used, incorporating 
in the software at least some of the functions of the unit 
described below. However, the use of an ASIC reduces manufacturing 
costs, and makes the device under the invention more secure against 
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fraud- Indeed, it is more difficult for a defrauder to access and 
understand the architecture of a wiring diagram specifically built 
for an application, and incorporated into an ASIC, than to obtain 
the instructions of a software incorporated in the memory of a 
micro-controller program. 

Figure 4 shows a display screen 28, such as it may appear to 
the player in the specific application of the game described in 
this example. At the bottom of the display screen there are two 
spaces GA and FI, where the messages "GAGNE" /win/ and "FIN" /end/ 
may appear, depending on whether the player won or lost in his game 
of chance. On the two sides of the screen there respectively appear 
two columns with spaces numbered 1, 2, 3, 4, 5 and 6, 7, 8, 9, 10. 
These spaces bear references NGI-NGIO, and correspond to successive 
gain levels reached by the player during the game. In the middle of 
the display screen there are spaces for three arrows F, 
respectively positioned across from circular spaces Nl, N2 and N3, 
inside which there appear the three figures 1, 2 and 3. As we will 
see below, one of these arrows F will mark the choice of the player 
after having pressed one of the game keys 25 to 27, while one of 
the spaces Nl, N2 or N3 will mark the reference data randomly drawn 
by the unit itself. 

Figure 5 shows schematically part of the elements contained in 
the component 37. First, there is an input/ output serial/ parallel 
register 39, which is part of the input/output unit interface, and 
linked to the two copper fields 29a and 30. This register 39 is 
connected tp a decoding circuit 40 which can decode the various 
ztems of information received by the register 39 (input/output, 
writing, reading). This decoding circuit 40 is linked to a 
formatting circuit 51, connected first to a status counter 48, such 
as a non-linear counter, which can contain status information 
representing the "loss" or "gain" result of the game, secondly to 
a counter 49, which can contain information on a payment actually 
made to the player, and thirdly, to a so-called gain counter 50, 
such .as a non-linear counter, which can contain gain information 

'depending on the result of th e game. In response to a status 
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request, the formatting circuit can deliver to the" input/output 
register 39 the contents CI, C2, C3 of the three aforeTOentioned 
counters 48, 49 and 50. 

The output of the gain counter 50 is also linked to the input 
of the first logical circuit 47, whose other input is linked to a 
first live memory Ml. The output of the first logical circuit is 
linked to a pseudo-random generator called gain encryption 
generator 46, such as a polynomial counter or a cyclic generator, 
also controlled by an ancillary counter 45 which receives at its 
input the output of the second logical circuit 44, the two inputs 
of which are respectively linked to the memory Ml and to the 
input/ output register 39- The output of the gain encryption 
generator 4 6 is linked to the register 39. 

Also included are logical control media 41 for all these 
elements, sequenced by a clock signal CLK with a frequency, for 
example, of 500 kHz, delivered by an oscillator 43. 

Another live memory M2 , linked to the input/output register 
39, is part, along with Ml, of the memory of the unit. 

Figures 6 and 7 illustrate in more detail the first random 
generation media capable of generating the reference data which 
will be compared to the data entered by the player. 

Figure 6 represents an embodiment appjicable to drawing of 
lots, made once for several successive reference data (ten, for 
example) , corresponding respectively to potential successive game 
data entries made by the player. 

A logical part ET 52 receives at the input the clock signal 
CLK, as well as game authorization information DV, the meaning of 
which will be explained in more detail later. The output of this 
logical port 52 is linked to the first module counter 2 (53-1) of 
a range of ten counters 53-1 to 53-10, connected in cascade, whose 
output is respectively linked to the ten inputs of a multiplexer 
54, whose output is linked to the first input of a comparator 55. 
Each comparator can therefore display a content corresponding to 
one of the three figures 1, 2 and 3. This multiplexer 54 is 
controlled, concerning the choice of its input path, by the output 
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of the gain counter 50. The other input of the comparator 55 
receives the value VJ /"valeur de jeu" = game value/ of the game 
data entered by the player. The output of this comparator is linked 
to the status counter 58 and to the gain counter 50. 

As we will see below, figure 7 illustrates a more particularly 
adapted embodiment, either for successive drawings associated 
respectively to the successive entries of game data made by the 
player, or to the random generation of game data which will be 
analogous, for example, to the casting of dice by the player. In 
this latter case, the reference data which will be compared to the 
randomly generated game data may be a constant stored in the memory 
of the unit. In this embodiment, the logical port 52 receives, 
instead of the game authorization information DV, the signal ACI of 
game data entered by the player on the communication interface. In 
this case, there is only one counter 53, linked to this logical 
port 52, the output of which is linked to the first input of the 
comparator 55. 

Now we are going to describe more in detail the operation of 
the device under the invention, referring more particularly to 
figures 8 to loc. 

During manufacture at the factory (stage 56) , a first set of 
ancillary data ICI is stored in the memory Ml, while a set of 
authentication data IC2 is stored in the memory M2 (stage 57 and 
stage 58) . The first set of ancillary data ICI constitutes a first 
securization, which will be used for actual payment of winnings to 
the player In general, it results from a first ancillary 
encryption of information specific to the unit. More precisely, 
this is, for example, encrypted information obtained from a serial 
number NS of the unit through an encryption algorithm of the secret 
code type, such as that known by the abbreviation DBS (Data 
Encryption Standard) , and using a first secret code for this ' 
purpose. It would also be possible to use an encryption algorithm 
with public code, such as that known by the abbreviation RSA 
(Rivest Shamir Adelman) . 

The set of identification data IC2 also consists Qf 
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authentication encryption of information specific to the unit. 
Concretely, this is an encryption of the serial number of the unit, 
based on a secret (or possibly public) cdde algorithm, with a 
different code than that used for the information ICl. This data 
set IC2 is, in fact, a certificate of the serial number NS. 

In order to preserve the content of the live memories Ml and 
M2, the unit will be permanently fed by its power sources installed 
at the factory. Therefore, said counters 53-1 to 53-10 operate from 
the manufacture stage of the unit at the factory. 

However, at this stage, the unit is unable to play, or locked^ 
In other words, the unit processors are Inactive, and a player who 
obtains such unit would not be able to enter game data using the 
keys 25-27. 

When released from the factory, the unit is stored in a sales 

facility equipped with a control station 12. When such a unit is 

sold to a player, it is first validated (stage 59) . With the unit 

set on the unit interface 17, the unit processors 16 read the 

content of the memory M2 , and the authentication encryption media 

21 recalculate the authentication data IC2, based on the serial 

number NS and the value of the secret code used (also present in 

the memory of the station). For this purpose, the unit processors 

can Jcnow the serial number NS of. the unit, either because it is 

directly stored in the memory M2 of the unit, or by optically 

reading, with a proper reader, the bar code located on the back of 

the unit. The matching of the authentication data with the data 

present in ,the memory M2 before this validation stage 59 allows 

making a first verification concerning the origin of the unit, and 

thus assuring that, a priori, the unit is authentic. 

After completing this verification of origin, the second 

ancillary encryption media 20b of the unit processors determine a 

second set of ancillary encrypted data IC3, also based on 

information specific to the selling station, and a secret (or 

possibly public) code encryption algorithm, using a third code, 

different than the first two. Practically, the second ancillary 

encryptio n media use as unit-spec ific information its serial 
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number, the date of the sale, as well as a sequence number of the 
sale on that date, and determine the encrypted certificate of this 
unit-specific information. Then, the unit processors store this 
station-specific information, as well as the certificate IC3, in 
the memory M2. 

The match between the authentication data set IC2, stored in 
the memory M2, and the recalculated data, also leads to the 
issuance of the game authorization information DV by the station 
processor; on the one hand, this will activate the unit processor 
in order to make the unit ready to play and, on the other hand, it 
will stop the operation of the game counters 53-1 to 53-10. This 
game authorization information, as well as the status request, are 
actually special commands issued by the station, at the receipt of 
which the unit processors perform predetermined operations. It is 
noteworthy that, in this embodiment, the set of reference data is 
then the set of values shown by the counters 53-1 to 53-10 when 
receiving the game authorization information- These reference data 
will be saved in the counters 53-1 to 53-10 for comparison with 
game data. The drawing of all reference data was therefore done 
once only. On the other hand, the quick pace of the operation of 
the counters, as well as the random character of the instant the 
counters are started at the factory, and the instant the 
information DV is received, contribute to the "random" character of 
the reference data generated. 

Of course, in the variation illustrated in figure 7, with 
successive 'drawings of reference data, the receipt of the game 
authorization information DV has only the effect of activating the 
unit processors, and of unlocking the unit to make it ready to 
play. 

The player now has a unit which is ready to play. 

The game stage proper 60, here corresponding to a particular 

example of game, is illustrated in more detail in figure 9. When 

the unit is activated (stage 61) by pressing the key 24, the screen 

28 displays (stage 62) the figures 1, 2 and 3 in the spaces Nl, N2 

and N3, as well as the previous gain level. If t he player has never 
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before played with this unit, there is, of course, no display of 
the previous gain level. , 

In stage 63, the player chooses a figure and presses the 
corresponding key 25-27, thus entering his game data. The arrow F, 
pointing to the spaces Nl, N2 or N3, according to the digit chosen 
by the player, is displayed, and unit processors activate a visual 
animation software, commonly called "chain" by professionals, which 
causes-the figures 1, 2 and 3 to spin on the display screen 28, 
simulating the movement of a roulette in a roulette game. Then, the 
"chain" simulates the deceleration of the roulette, and the figure 
corresponding to the reference data contained in the first game 
counter 53-1 is displayed in the corresponding location on the 
display screen 28 (stages 64, 65). 

If the figure is displayed facing the arrow F which marked the 
game data chosen by the player (stage 67), the player wins. In this 
case, the word "GAGNE" /wins/ is displayed in the GA location, and 
the gain level 1 is displayed in the NGl location. Otherwise (stage 
66), i.e. if the figure corresponding to the reference data is not 
displayed facing the arrow F, the player lost, and the word "FIN" 
/end/ is displayed in the FI location. In this case, the unit 
processor locks (stage 68) the communication interface with the 
player, in the sense that the latter can no longer enter game data 
with the keys 25-27. In other words, the unit is again made unable 
to play, and can be thrown out, for example. 

If he wins, the player has two possibilities. He either 
decides to -stop playing and request payment of his winnings, by 
going to the station 12, or he decides to try his chance once more, 
by choosing again a game data set which he enters by using the keys 
24-27. Then the game repeats stages 63 to 66 or 67. In the 
embodiment illustrated in figure 6, the content of the gain counter 
allows selecting the input path of the multiplexer 54/ since this 
gain counter contains different gain information for each winning 
attempt of the player. Thus, in this case, on the second attempt, 
the second counter 53-2 of the chain will be selected, and its 
content, corresponding to the second reference data set, will be 
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compared to the game data entered by the player. The player can 
thus try his chance ten times one after the other, hoping to reach 
the gain level 10. With each winning attempt, his current gain 
level is displayed, and is higher than the preceding gain level. On 
the contrary, if during this sequence of events, an attempt loses, 
the unit can no longer play, and the- preceding gain level remains 
displayed. Of course, the player can make a further attempt only if 
he won on the previous attempt, i.e. if the reference data in his 
preceding attempt matched the game data he entered at that time. 

In the embodiment illustrated in figure 7, the ten reference 
sets of data corresponding to the ten gain levels are not 
predetermined in advance. The counter S3 works until a key 24-27 is 
pressed by the player, marking his choice of game data. This action 
ACJ /activating game choice/ then blocks the counter 53 on a value 
defining the randomly generated reference value, associated to the 
game data entered by the player during his attempt. After 
displaying a possible winning result, the counter 52 continues to 
work, and will again freeze on another value, if the player enters 
another game value - 

The variation in figure 7 is also compatible with another type 
of game, consisting, this time, of comparing the constant 
predetermined reference values stored in memory, to game data 
entered randomly by the player. This simulates a casting of dice by 
the player. In this case, the receipt of the signal in ACJ, caused 
by the player's pressing an appropriate key on the unit, causes the 
counter 53 to stop, marking the random generation of the game data, 
which will be then compared to the reference value (here also 
indicated by VJ) stored in memory. 

If a player who won and reached a certain gain level decides 
to stop playing and to request payment of his winnings, he makes a 
payment request 69 to a station 12, which then begins an in-depth 
verification stage 70. We must note, at this point, that the player 
can request such payment from the same station that sold him his 
unit, or from a similar station. 

We now refer more particularly to figures lOa to lOc, in order 
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to describe this verification stage. 

This stage begins with a visual verification 71 by the agent 
in charge of making payments. This visual verification consists of 
verifying the display of the word "GAGNE," as well as the display 
of a gain level. If no error 72 appears, the unit is then placed on 
the input/ output interface 17 of the station, and the system 
processors deliver a status request (stage 73) through the unit 
processors. Upon receipt 74 of this status request STl, the unit 
processors deliver to the input/output register 39 the respective 
contents CI, C2, C3 of the counters 48, 49 and 50, as well as the 
content of the memory M2 . The respective contents Cl, C2, C3 are 
then displayed in "clear" on the screen 14 of the dialogue 
interface of the station (stage 78). This constitutes another 
visual verification which, however, is not sufficient proof for 
actual payment of the winnings to the player, explained below. 

A verification stage 81 then begins, consisting of verifying 
the value of the second ancillary data IC3 contained in the memory 
M2. For this purpose, the second ancillary encryption media of the 
station system processors read the station-specific information 
(serial number of the station, date of sale and sequence order) in 
the memory M2, and recalculate the certificate IC3 of this specific 
information, in order to compare it to that contained in the memory 
M2. 

A non-matching of these two data sets IC3 also leads to an 

error 82 which can interrupt the payment process. Otherwise, the 

system processors compare -the gain information from the gain 

counter 50 to a predetermined gain value GS . If the gain is higher 

than this value GS, the system processors verify whether the 

identification of the unit in question, i.e. its serial number, is 

not already on a list of winning unit identifications which were 

already paid. If this is the case, there would also be an error 85, 

which interrupts the payment process. If the station 12 is not 

linked to the storage media 23 of this list, the player is asked to 

go to a station linked to this list. Of course, the player can be 

asked to change stations immediately a fter the visual verification 
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71. 

If the gain is lower than the GS value, or if the gain is 
higher than the GS value and the unit is not on the winning list, 
the system processors issue (stage 86) payment request information 
(IDP) accompanied by an aleatory binary word MBA. Upon receipt 87 
of the information IDP and the binary word MBA through the unit 
input/output interface, the encryption media {44, 45, 46 and"47) of 
the unit can generate a first encrypted gain value VFl, based on 
the gain information contained in the gain counter 50 and the first 
ancillary data set ICI contained in the memory Ml {stages 88-92) . 

For this purpose, the pseudo-random gain encryption generator 
46 can be initialized at an initial value, and operate until it 
receives a stop command. The first encrypted gain value VFl is then 
the value delivered by the pseudo-random gain encryption generator 
46 when receiving such stop command. 

The first logical circuit 47 receives, as input variable, the 
gain information contained in the gain counter 50, and part of the 
first ancillary data set ICI contained in the memory Ml. This, first 
circuit 4 7 then applies a first predetermined logical function, for 
example based on an exclusive OU /or/, to these two input 
variables, and delivers a first corresponding output value, which 
defines the initial value of the pseudo-random gain encryption 
generator 46. 

The ancillary counter 45 can count up or down from an initial 
counter value to a final counter value. The command to stop the 
operation of the pseudo-random gain encryption generator is then 
delivered by the ancillary counter 45, when said final counter 
value is received. 

The second logical circuit 4 4 is used here to define the 
initial counter value, or the final counter value, . depending on 
whether the counter counts up or down. 

This second logical circuit receives, as input variable, the 
pseudo-random binary word MBA and a second part of the first stored 
ancillary data set ici. A second predetermined logical function, 
preferably different than the first, is then applied to these two 
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input variables, and the second logical circuit 44 delivers a 
second output value, which defines the initial counter value or the 
final counter value. 

Thus, the polynomial counter (for example) 46, is initialized 
at an initial value depending on the encrypted content of the 
memory Ml and on the gain information contained in the gain counter 
50. This counter operates then until the ancillary counter 45 
stops, the number of repetitions of the latter being defined 
pseudo-randomly with the help of the binary word MBA. When the 
counter 4 6 stops, its content, which defines the first encrypted 
gain value VFl, is. delivered to the system processors of the 
station through the intermediary input/ output register 39 (stages 
93, 94). 

The actual payment of the winnings to the player will take 

place only if this first encrypted gain value VFl, delivered by the . 

unit, is identical to a second encrypted gain value VF2, 

established by the system encryption media 19 of the station. For 

this purpose, the first ancillary encryption media 20a of the 

station recalculate the first ancillary encrypted data ICl based on 

the serial number of the unit and the corresponding secret code. 

This serial number can be stored in the memory Ml, or read 

optically by an optical scanner. Starting from there, the system 

encryption media, which are similar to the unit encryption media 

(i.e. logical circuits and counters analogous to logical circuits 

44, 47 and counters 45 and 46), calculate the second encrypted gain 

value, similarly to that used for the calculation of the first 

encrypted gain value, based on the information ICl recalculated by 

the first ancillary encryption media, and the pseudo-random binary 

word MBA, which is known to the station because it is generated by 

the pseudo-random generation media of the system 22. 

If the two sets of data do not match, a new error appears and 

interrupts the payment process. On the contrary, if they match, the 

payment 99 of the winnings is made to the player, the unit is 

locked (stage loi) , the counter 49 is loaded with information 

concernin g the payment made to the player, and the serial number of 
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this winning unit is stored (stage 100), either at' the station 
itself, or in the storage media 23, especially in the event of a 
gain higher than the value GS. 

The fact that the actual payment of the winnings to the player 
is subject to the matching of the two encrypted gain values VFl and 
VF2 guarantees the payor entity against fraud, especially that 
caused by counterfeit units containing microprocessors programmed 
to simulate fake gain information values. 

Although the other verification stages (status request, 
verification of data IC2 and IC3) are not indispensable, they 
conveniently contribute to increase securization against fraud. On 
the other hand, the professional would have understood that only 
the content of the counters 48, 4 9 and 50 have value of proof for 
the payor entity, and that the display of their content on the 
screen 14 or 28 is merely a visual indication. Thus, and also in 
order to increase securization, the gain counter 50 is conveniently 
designed to contain successively predetermined binary gain words 
representing successive gain information that the player could 
obtain if he successively won at each attempt. Each binary word is 
then different than the preceding and following words found on the 
list, by at least two bits. Such a precaution complicates further 
the task of a defrauder who would seek to modify the content of the 
gain counter, because he would have to modify two bits at a time, 
rather than one. 

The same precaution can be conveniently used for the status 
counter 48,' with a second, predetermined list of binary words 
differing from each other by at least two bits. In addition, this 
brings double securization for the verification of the gain level 
obtained and the losing or winning status of the game at each 
attempt . 

Finally, a player may wish to purchase a unit from a third 
party in order to continue the game. In this case, it is especially 
beneficial that the buyer can verify, in particular, the content of 
the gain counter. Thus, in the presence of a verification request 
concerning gain information coming from the buyer player, the 
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system processors can read the contents of the gain, status and 
payment counters, and communicate the results of ■ such reading on 
the screen 14 of the dialogue interface. Of course, in this case, 
the payment request infoimation IDP is not delivered to the unit. 
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•CLAIMS 

1. Electronic device implementing a game of chance, comprising 
a) a portable unit (11) containing 

- an input/output unit interface (39, 29/ 30) that can receive 
. predetermined game authorization information without which the unit 

cannot play, 

- a communication interface (24, 25, 26, 27, 28) with the 
player, 

- memory circuits (Ml, M2 , 53-1,... 53-10, 48, 49, 50) that 
can store at least one reference data set, 

- unit processor, containing 

. comparison media (55) that can compare said reference data 
with game data entered by the player using the communication 
interface, one of these two data sets being a randomly generated 
value, 

. media (50) that can establish gain information depending at 
least on the result of said comparison, and store such gain 
information in the memory (50), and 

. unit encryption media (4 4-47) that, in response to 
predetermined payment request information (IDP) received by the 
input/output unit interface, can establish a first encrypted gain 
value (VFl) based on said game information, and deliver this first 
encrypted gain value to the unit interface, and 

b) a control system (12), external to the unit (11), 
comprising ^ 

- an input/ output system interface (17) that can communicate 
with the input/ output unit interface, and 

- system processors (16), that can, 

. in the presence of a payment request from the player, read 
said gain information contained in the unit memory, and deliver 
said payment request information (IDP) to the input/output system 
interface, and comprise 

. system encryption media (19) , similar to the unit encryption 

"edia, which can establish a se cond encrypted gain value (VF2) 
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based on said gain information read, as well as comparison media 
that can compare the two encrypted gain values, 

whereby the actual payment of the winnings to the player is 
subject at least to the matching of the two encrypted gain values. 

2. Device according to claim 1, characterized by the fact that 
the system processors can transmit said predetermined game 
authorization information (DV) . 

3. Device according to claim 1 or 2, characterized by the fact 
that the unit processors include first random generation media (53- 
1, — 53-10) that can randomly generate said reference data from a 
predetermined series of values, while the communication interface 
has data entering media (25-27) , allowing the player to choose his 
game data among the same predetermined series of values. 

4. Device according to claim 3, characterized by the fact that 
the first random generation media have at least one game counter 
(53-1... 53-10) that operates from an initial instant preceding the 
receipt of said predetermined game authorization information (DV) , 
this counter being liable to the stopped when receiving a chosen 
stop command (DV) and to save the value it shows when its operation 
stops, whereby said stop value defines said reference value. 

5. Device according to claim 4, characterized by the fact that 
the stop information constitutes said game authorization 
information (DV) . 

6. Device according to claim X or 2, characterized by the fact 
that the unit processors include second random generation media 
(53), controlled by the action of the player, that can randomly 
deliver said game data, whereby the set of reference data is a set 
of data previously stored in the memory. 

7. Device according to one of the preceding claims, 
characterized by the fact that the memory circuits (Ml) can store 
a first set of predetermined ancillary data (ICl), 

and by the fact that unit encryption media (44-47) can generate the 
first encrypted gain value (VFl) based on said gain information and 
said first set of ancillary data (ICl) . 

8. Device according to claim 7, characterized by the fact that 
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the first set of ancillary data is obtained based on a first 
ancillary encryption of at least a first item of information CNS) 
specific for the unit, and is present in memory (Ml) before the 
receipt of the game authorization information (DV) - 

9. Device according to claim 7 or 8, characterized by the fact 
that the unit encryption media include: 

- a pseudo-random gain encryption generator (46) that can be 
initialized at an initial value, and operate until it receives a 
stop command, in which case the first encrypted gain value (VFl) is 
the value delivered by the pseudo-random gain encryption generator, 
when receiving said stop command, 

- a first logical circuit (47) which can receive, as input 

variables, said gain information and at least part of the 
first ancillary data stored (ICI) , apply a first logical 
predetermined function to these two input variables, and 
deliver a first corresponding output value, defining said 
initial value of the pseudo-random gain encryption 
generator, and 

an ancillary counter (45), which can count up or down, 
from an initial counter value to a final counter value; 
said command to stop the operation of the pseudo-random 
gain encryption generator (46) is then delivered by the 
ancillary counter, when reaching said final counter 
value. 

10. Device according to claim 9, characterized by the fact 
that the unit encryption media include a second logical circuit 
(44), which can receive, as input variable, the pseudo-random 
binary word (MBA) and at least a second part of the first stored 
set of ancillary data (ICl), apply a second predetermined logical 
function to these two input variables, and deliver a second 
corresponding output value, which defines said initial counter 
value or the final counter value. 

11. Device according to one of the claims 7 to 9, 
characterized by the fact that the system processors have a system 
pseudo-random generator (22) , that can generate a pseudo-random 
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binary word which accompanies said payment request inforroation 
(IDP) . 

12. Device according to claim 11, combined with claim 8, 
characterized by the fact that system processors include the first 
ancillary encryption media (20a) , which can perform the first 
ancillary encryption of the first specific information (NS) in 
order to recalculate the value of the first ancillary data (ICl), 
by the fact that system encryption media are similar to the unit 
encryption media 

and by the fact that the system encryption media can determine the 
second encrypted gain value {VF2} based on the value of the first 
recalculated ancillary data (ICl) and the pseudo-random binary word 
(MBA) . 

13. Device according to one of the preceding claims, 
characterized by the fact that memory circuits can store a second 
set of predetermined ancillary data (IC3) , and that, in the 
presence of a request for payment by the player, the system- 
encryption media can process a verification (81) of the value of 
this second set of ancillary data before delivering said payment 
request information to the unit. 

14. Device according to claim 13, characterized by the fact 
that the system processors hav.e a second set of ancillary 
encryption media (20b), which can perform a second ancillary 
encryption of a second information specific for the control system, 
in order to determine the second set of ancillary data (IC3), at 
the latest when receiving said game authorization information from 
the unit, 

by the fact that the system processors can store said second 
specific information and the second set of ancillary data (IC3) in 
the memory (M2), 

by the fact that the second ancillary encryption media can read the 
second specific information and the second set of ancillary data in 
the memory of the unit, and compare the value of the second set of 
ancillary data read to that recalculated by the second ancillary 
encryption media based on the second specific information read. 
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15. Device according to one of the preceding claims, 
characterized by the fact that the memory is able to store unit 
authentication data (IC2) before receiving said game authorization 
information, 

and by the fact that the receipt of said game authorization 
information depends on the verification of these authentication 
data. 

16. Device according to claim 15, characterized by the fact 
that the authentication data arise from the encryption of the 
authentication of a third information specific to the unit (NS) , 

by the fact that the system processors have authentication 
encryption media (21) that can recalculate the authentication data 
(IC2) based on the third specific information, in order to verify 
the value of this third specific information read in the memory 
(M2). 

17. Device according to one of the claims 8 to 16, 
characterized by the fact that the first and second ancillary 
encryption, as well as the authentication encryption, have code 
encryption algorithms, and by the fact that the second ancillary 
data and the authentication data are encrypted certificates of the 
second and third specific information. 

18. Device according to one of the claims 8 to 17, 
characterized by the fact that the first and third specific 
information have an identification specific to the unit, such as 
the serial number of the unit, and by the fact that the system 
processors have media, that pan read the serial number. 

19. Device according to one of the preceding claims, 
characterized by the fact that the memory has two memory circuits 
(Ml, M2), one of which contains the first ancillary data, and the 
other the first set of authentication data (IC2) and then, after 
verifying the latter, the second set of ancillary data (IC3). 

20. Device according to one of the preceding claims, 
characterized by the fact that the memory has a status counter (48) 
which can contain status information representing the result of the 
game, as well as a payment counter (49) , which can contain 
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information on a payment actually made to the player, or not yet 
made to the player, 

by the fact that, in the presence of a payment request from 
the player, the system processors can also read the content of the 
status and payment counters, before delivering said payment request 
information to the unit. 

21. Device according to one of the preceding claims, 
characterized by the fact that it has power supply media (35, 36) , 
allowing at least certain unit features to function before 
receiving game authorization information. 

22. Device according to one of the preceding claims, 
characterized by the fact that the unit cannot play after a 
comparison between reference data and game data showing a losing 
game and/or after an actual payment is made to the player. 

23. Device according to one of the preceding claims, 
characterized by the fact that the communication interface has 
media (28) for returning to the player result information 
concerning the result of the comparison between game and reference 
data, indicating to him whether he lost or won. 

24. Device according to one of the preceding claims, 
characterized by the fact that the memory circuits can store 
several reference data, and 

by the fact that several game data can be entered by the 
player. 

25. Device according to claim 24, characterized by the fact 
that game data are entered^ successively, each game datum entered 
being compared to a predetermined reference datum, 

and by the fact that a game datum cannot be entered through 
the communication interface unless there Is a match between the 
previously entered game datum and the corresponding reference 
datum , 

and by the fact that to each match corresponds a different 
gain information item {NGl, . . . NGIO) . 

26. Device according to claims 23 and 25, characterized by the 

fact that the result information comprises the display of gain 
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level information corresponding to the' gain information contained 
in the memory. 

27. Device according to one of the claims 24 to 26, 
characterized by the fact that the memory has a gain counter (50) 
that can successively contain predetermined binary gain words 
representing successive gain information, each binary word 
differing from the following and preceding word by at least two 
bits. 

28. Device according to one of the claims 24 to 27, in 
combination with claim 20, characterized by the fact that the 
status counter (48) can contain successively predetermined status 
binary words representing successive gain information, each binary 
word differing from the following and preceding word by at least 
two bits. 

29. Device according to one of the preceding claims; in 
combination with claims 4 and 24, characterized by the fact that 
the first random generation media have several game counters (53- 
1,... 53-10), each counter being capable of containing a reference 
datum, and being associated to the entering of a game datum by the 
player. 

30. Device according to claim 29, characterized by the fact 
that the receipt of said game authorization information (DV) stops 
the operation of the counters, in which case the various reference 
data are the various values shown by the counters when they 
received this game authorization information. 

31. Device according , to one of the claims 1 to 28, in 
combination with claims 4 and 25, characterized by the fact that 
the counter is associated with every successive entering of game 
data by the player, and by the fact that the entering of a game 
datum by the player corresponds to a value defining the reference 
value associated to this game datum. 

32. Device according to one of the preceding claims, 
characterized by the fact that the control system has a dialogue 
interface (14, 15) that can receive said payment request from the 

player. 
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33. Device according to claim 32, characterized by the fact 
that, in the presence of a request for verification of gain 
information from the player, the system processors can read the 
content of the gain counters, status counters, and payment 
Counters, and communicate the results of this reading on the 
dialogue interface, 

34. Device according to one of the preceding claims, 
characterized by the fact that, in the presence of a payment 
request from the player, the system processors can transmit to the 
input/output system interface a status request (STI), in response 
to which the unit processors deliver said gain information to the 
input/output unit interface. 

35. Device according to one of the preceding claims, 
characterized by the fact that the control system has at least one 
station, such as a terminal. 

36. Device according to claims 14 and 35, characterized by the 
fact that the second specific information has the serial number of 
the station, the date of sale of the unit to the player, and the 
sequence number of that sale on that date, 

37. Device according to claim 35 or 36, characterized by the 
fact that the control system has several stations with analog 
structure, whereby game authorization information and payment 
request information can be delivered by the same station or by two 
different stations. 

38. Device according to claims 35 to 37, characterized by the 
fact that esch unit has a unique identification, by the fact that 
the control system has storage capacity (23) for a series of 
identifications of winning and paid units, 

by the fact that, in the presence of a payment request from the 
player and corresponding to a gain higher than a predetermined gain 
value, system processors can verify whether the identification of 
the unit concerned is already on said list, 

39. Device according to the preceding claims, characterized by 

the fact that the unit has a wired integrated circuit (37) , 

containing the unit processo rs and the memory of the unit. 
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40. Unit pertaining to the device according to one of the 
claims 1 to 39. ' • 

41. Control system pertaining to the device according to. one 
of the claims 1 to 39. 
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Fig. 3c 
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Fig. 6 
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"vers" = towards 
Fig. 7 



/Diagram/ 
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